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(54) Alarm analysis tools method and apparatus 



(57) One aspect of the alarm analysis tools cope 
with insufficiently understood process characteristics, 
requiring sensitivity to unusual behaviour and rapid ex- 
ploration and diagnosis. The configuration of the alarms 
and their associated displays are governed by general- 
ized display policies applicable to groups of alarms rath- 
er than by detailed configuration of individual alarm ac- 



tion. To aid an operation in the configuration process, 
another aspect of the invention concerns an alarm se- 
lection method and apparatus operating on a computer 
(6), which comprises an application window displaying 
a main alarm list, a selection means to. select the alarm 
indications displayed in the alarm list, and an operations 
means producing a main alarm list subset having char- 
acteristics of the selected alarm indications. 
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Description 

RELATED APPLICATIONS 

[0001] This application claims the benefit of provision- 
al application serial numbers 60/083,903, filed on May 
1, 1998; 60/119,523, filed February 8, 1999; and 
60/1 23,21 5, filed March 8, 1 999, the entire teachings of 
each are incorporated herein by reference. 

BACKGROUND OF THE INVENTION 

[0002] Process control alarm systems are used in the 
area of factory automation. Specifically, process auto- 
mation uses many process control alarms to inform op- 
erators that a process is within or has exceeded process 
control tolerance limits. A typical application in which a 
process control alarm system is employed is a styrene 
manufacturing factory. Within a styrene manufacturing 
plant, various processes require machines, such as a 
feed tankage, a furnace, a heat recovery system, one 
or more reactors, and a separator. The number of proc- 
ess control alarms constantly monitoring these ma- 
chines in a styrene manufacturing plant range in the tens 
of thousands, where process control alarm variables 
range between two and four times the number of alarms. 
[0003] In the past, alarm displays have been large 
boards with lights and labels, where an illuminated light 
or LED indicates which process control alarm has 
sensed a problem in the machine, or which machine in 
the factory is experiencing a problem. Today, a software 
interface to aid operators in understanding what is hap- 
pening with one or many machines is used rather than 
the alarm board. Increasingly, a GUI (Graphical User In- 
terface) is used as the human-to-machine interface be- 
cause of its inherent ease of use and intuitive qualities. 
Through a GUI interface, process control alarm monitor 
variables are often capable of being set and monitored. 
These control variables are linked with the feedback 
systems used in a process control system to make pseu- 
do real-time analysis possible. 
[0004] Two techniques for configuring an alarm moni- 
tonng system are off-line data file entry and on-line 
alarm selection. The off-line data file entry requires an 
engineer or operator to manually determine then enter 
alarm names into a text file, requiring the responsible 
person to know alarm choices, (i.e., names/acronyms/ 
pnemonics/icons), and the alann system configuration 
to understand which alarms are related so as to monitor 
relevant and nonredundant alarms. The on-line alarm . 
selection method is more graphically oriented, but re- 
quires a system to be operating, has limited dedicated 
alarm selection tools, and requires the same level of un- 
derstanding by the operator as the off-line method. Fur- 
thermore, in process control systems undergoing evo- 
lutionary changes, newly incorporated alarms require 
an alarm monitor system reconfiguration, thereby re- 
quiring repeating the above steps with additional con- 



cerns. 

[0005] In yet another aspect of alarm systems, a typ- 
ical alann system supports a set of standard -(absolute 
and deviation) alarm conditions, associated with several 

5 control block types. These control block types cause 
some indication in a corresponding loop and process 
displays, whenever an associated alarm condition oc- 
curs. Log displays augment the process displays and 
list a history of all alarms that have occurred in some 

10 interval of time, subject to a selection filter. 

[0006] Alarms are a main automation system vehicle 
for dealing with operations too abnormal for automated 
accommodations. A large fraction of the abnormalities 
are effectively unfamiliar to an operations and applica- 

is tions group. Some abnormalities are very mild, others 
are catastrophic. There are applications with thousands 
of potential alarms defined, and hundreds active at any 
point in time, sometimes within a single causal shower. 
[0007] A typical alarm system, providing individual 

20 alarm priority handling capabilities are inherently inad- 
equate to support an operator in recognizing and coping 
with resulting abnormal or crisis situations. This is true 
under the best human factors support and applications 
design. An interest in operating with fewer operators 

2$ places that much more of a load on the reduced number 
of operators, exacerbating the problem. 
[0008] Creating an alarm monitoring system configu- 
ration input for a small process control system is rela- 
tively easy, but for a process control system having up 

30 to 200,000 alarms with 50,000 alarm variables, the con- 
figuration alarm selection process is overwhelming. Off- 
line, manual/alarm configuration entry is ill-suited for 
large systems, and on-line alarm configuration entry 
means the alarm system is off-line during a reconfigu- 

9S ration. Several alarm system reconfigurations is time 
consuming and requires well-trained personnel each 
time such reconfiguration needs to be done. 
[0009] The present invention is as claimed In the 
claims. 

40 [0010] The present invention provides an off-line vis- 
ual configuration method and apparatus for an alarm 
monitoring system. Operators perform high-level alarm 
selection functions on an off-line basis. A complete list- 
ing of alarms is presented to the operator, and several 

45 sophisticated, yet intuitive, graphically driven functions 
allow the operator to select a desired subset of alarms 
and store the subset as a configuration listing for an on- 
line alarm monitoring system. 
[0011] Accordingly, one embodiment of the invention 

so concerns an alarm monitor visual configuration selec- 
tion apparatus operating on a computer, which compris- 
es an application window selection means and opera- 
tion means. The application window has an alarm list for 
displaying indications of a plurality of alarms. The selec- 

5$ tion means enables an operator to select desired prop- 
erties of the indications of alarms (e.g., character sub- 
strings). The operation means produce an alarm list 
subset having characteristics of the selected properties 
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cf the indications of alarms. In a preferred embodiment, 
the application window has a first subwindow, a second 
subwindow, and a third subwindow. The first subwindow 
comprises the entire alarm list, the second subwindow 
comprises a temporary subset of the alarm list, and the 
third subwindow comprises a final subset of the alarm 
list. Furthermore, the alarm selection system comprises 
an input file having the entire alarm list, and an output 
file into which a final alarm list subset in the third sub- 
window is stored. In the preferred embodiment, the input 
file and output file are text files, and the lists in each of 
the subwindows are arranged in alphabetical order. 
[0012] The visual configuration has a GUI interface. 
The computer comprises a user input/output device, 
preferably a computer mouse, that is capable of being 
used to select portions of indications of alarms displayed 
in the subwindow alarm lists. The selected portions of 
indications of alarms are highlighted in a graphical user 
interface manner. 

[0013] Embodiments may further comprise several 
alarm list operation buttons in the application window 
that are used to operate on a user's selection. Boolean 
logic capabilities are incorporated into the underlying 
functions of the operation buttons. The alann list oper- 
ation buttons include move, load; delete, keep, clear, 
and save alarm list operations. Each subwindow has at 
least one associated alarm list operation button. 
[0014] According to another embodiment, there also 
features an alarm monitor visual configuration selection 
method operating on a computer. The selection method 
comprises the steps of displaying an alarm list in an ap- 
plication window, receiving an input selection criteria, 
operating on the alarm list in response to the input se- 
lection criteria, and producing an alarm list subset hav- 
ing characteristics of the input selection criteria resulting 
from operating on the alarm list. 
[0015] An application window comprises three sub- 
windows arranged from left to right in the application 
window. The first (leftmost) subwindow comprises an 
alarm list, the second (middle) subwindow comprises a 
temporary subset of the alarm list, and the third (right- 
most) subwindow comprises a final subset of the alarm 
list. In the preferred embodiment, the step of displaying 
the alarm list includes arranging the alarm indications in 
each alarm list in a sensibly grouped order, preferably 
alphabetically. The selection method further comprises 
the steps of loading the alarm list from an input file and 
storing the final alarm list subset to an output file. 
[001 6] Furthermore, the selection method enables an 
operator to select alarm list text portions from the begin- 
ning, intermediate, or ending of alarm names (i.e., indi- 
cations) in the alarm list. From a user's selection, oper- 
ation buttons associated with each respective subwin- 
dow operate on the entire alarm list, where wildcards 
are used in the operation. Multiple move operations from 
the first subwindow to the second subwindow, or the 
second subwindow to the third subwindow, result in an 
aggregate alarm subset list in the window to which the 



alarms are sent. In an alternate embodiment of the 
present invention, the alarm lists comprise icons, repre- 
senting alarm list indications. 
[0017] Another aspect of the present invention con- 
s cems another problem in the pnor art. The problem with 
previous alarm system analysis tools is that single alarm 
priority handling systems inadequately support an oper- 
ator in analyzing an alarm shower to isolate or determine 
a casual event. 

[001 8] A new set of alarm analysis tools focus on irh- 
proving the analysis and presentation of alann informa- 
tion. The alarm analysis tools extend existing alarm log 
and filter philosophies to better support an operator in 
abnormal situations. Excepting a few alarms with well 
defined (but not automated) operating responses, most 
of the alarm activity is coping with deficiencies in the 
process automation and operator understanding, and in 
the adjustment of the alarms themselves. The alarm 
analysis tools overcome these deficiencies. 
[001 9] The alarm analysis tools cope with insufficient- 
ly understood process characteristics, requiring sensi- 
tivity to unusual behavior and rapid exploration and di- 
agnosis. Accordingly, the alarm analysis tools are not 
overloaded with operating features. In particular, the 
tools do not address complex, configured, alarms spe- 
cific responses more appropriate for well understood, 
systematic, plant automation. The configuration of the 
alarms and their associated displays are governed by 
generalized display policies applicable to groups of 
alarms rather than by detailed configuration of individual 
alarm action, The display approach supports quick, , 
easy, transparent operator action. 
[0020] The tools support an operator at an operator 
console. They permit seeing alarms in a wider opera- 
tional perspective and minimize tunnel vision. Hierarchi- 
cal alarm summaries help in this regard. Included alarm 
indications at each level based on automatically com- 
puted summary descriptions also help, which link the 
higher level's summary to the lower level's summary. 
The tools permit the operator to manage the alarms with 
less display noise overload; grouping alarms to signifi- 
cantly enhance the information value helps this goal. 
The tools give the operator complete control over the 
level of alarm display detail, while making his display 
choices and the consequences of any dynamic category 
selection for alann filtering continuously apparent. 
[0021] Thus, another aspect of the present invention 
is a method for providing alarm information in a compu- 
ter linked to an alarm system having electronic alarm 
messages. The method includes the steps of: (i) asso- 
ciating alarm indications with alarms, each alarm indi- 
cation being a representation of an alarm message, (ii) 
providing a set of alarm categories having a hierarchy 
of subcategories, where each category includes a sub- 
set of logically related alarm indications, (iii) for the set 
of categories, providing a set of categorizations, where 
each categorization includes a subset of logically relat- 
ed alarm categories, (iv) receiving alarm messages from 
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the alarm system and mapping each received alarm 
message to an alarm indication, (v) updating the cate- 
gories and categorizations by a metric, as a function of 
the received alarm messages, and, (vi) displayinga sub- 
set of the categorizations in an organized and meaning- 
ful manner, thereby providing alarm information to an 
operator. 

[0022] In one embodiment, categories include pat- 
terns, where a pattern is defined as a sequence of alarm 
indications. An operator or administrator defines poli- 
cies for the categories, affecting the alarm information 
accordingly. Furthermore, priorities among alarms and 
categories are used to help in the step of displaying the 
categorizations m an organized and meaningful man- 
ner. 

[0023] Furthermore, the step of updating the catego- 
ries and categorizations by a metric includes the steps 
of providing an alarm criteria for each alarm indication, 
providing each category and categorization with an 
alann counter, and adjusting each alarm counter in re- 
sponse to a comparison operation. The comparison op- 
eration includes comparing an alarm message with its 
respective alarm criteria, where a subcategory directly 
including an alarm indication adjusts its alarm counter 
for each associated alarm message comparison. A hi- 
erarchically superior category adjusts its alarm counter 
on a per subcategory and per immediately subordinate 
alarm indication basis. 

[0024] Embodiments may also include a step of de- 
termining a one word summary. Determining a one word 
summary includes the steps of: determining a list of in- 
dicator categories, where an indicator category is a hi- 
erarchically highest level category in a display; scanning 
all subcategories of the indicative category; and, for 
each subcategory of each indication category, determin- 
ing which subcategory alarm counter equals the count 
of the indicator category, whose overall counts has the 
smallest number of alarm indications. The one word 
summaries are preferably a subcategory descriptor or 
an alarm indication descriptor. The one word summary 
is displayed near the indicator category, in the preferred 
embodiment, a highest level priority for a subset of the 
indicator categories is also displayed near the indicator 
category. 

[0025] In the step of updating the present invention 
further includes providing a mask/filter selection refer- 
encing a subset of alann indications, screening the re- 
ceived alarm messages according to the mask/filter se- 
lection, and applying the step of screening to the steps 
of both determining a one word summary and displaying 
a subset of the categorizations. In the preferred embod- 
iment a dynamic mask/filter criteria is used, which allows 
dynamic changes depending on alarm conditions. Fur- 
thermore, an alarm limit adaptation table dynamically 
adjusts a set of ranges for a set of operating range-type 
alarms. 

[0026] In sets of displays and logs, the present inven- 
tion also includes displaying alarm information in an or- 



ganized and meaningful manner. A -display is selected 
from a group consisting of logs, battle ribbon alarm/ 
event trends, alarm summary indicator matrices, and 
predictions/diagnostic displays. Also, a set of side log 

5 displays provides specific alann information. 

[0027] Embodiments may also enable a set of con- 
soles to operate together. In one embodiment, each 
console has a specific mask/filter selection, but also in- 
cludes specific mask/filter selections for each othercon- 

10 sole in the set, which allows an operator to take a break 
while having his or her duties covered. In an alternate 
embodiment, each console has a specific mask/filter se- 
lection and shares the specific mask/filler selection with 
each other console in the alarm analysis tools console 

is set through a console-to-console transfer. In yet another 
embodiment, a console specific mask/filter selection is 
transmitted to the alarm system to inhibit alarm messag- 
es from being transmitted transmissions, thereby shar- 
ing the console specific mask/filter with the plurality of 

20 operator consoles. 

[0028] According to another aspect of the present in- 
vention, in a computer linked to an alarm system having 
electronic alarm messages, an apparatus for providing 
alarm information includes a set of alarm indications fcs- 

2S sociated with the alarm messages. A set of categories 
are used, into which a subset of the alarm indications 
are grouped. A set of categorizations are used, into 
which a subset of categories are grouped. An interface, 
which receives the electronic alarm messages from the 

30 alarm system, maps the alarm messages into alarm in- 
dications. The apparatus further includes a set of met-, 
rics associated with the categories and categorizations 
by which categories and categorizations are measured. 
A software routine adjusts the set of metrics in response 

35 to the received alarm messages. Finally, there is a con- 
sole display where a subset of the categorizations are 
displayed in an organized and meaningful manner, 
thereby providing alarm information to an operator. 
[0029] The categories may include a set of patterns, 

40 where each pattern defines a sequence of alarm indica- 
tions. Also, categories include 5 corresponding policies, 
affecting the alarm information and display of alarm in- 
dications. The apparatus also includes a prioritizing soft- 
ware routine that receives a set of priority rules from the 

45 policies and adjusts the set of priority metrics associated 
with the categorizations and categories. The display 
presents a subset of categorizations as a function of the 
associated priority metrics. 

[0030] The apparatus further comprises a set of alarm 
so criteria; a plurality of alarm counters, where each cate- 
gory and categorizations has an associated alarm coun- 
ter; and a comparison software routine. Thecomparison 
software routine adjusts the alarm counters in response 
to comparing the associated alarm indications with the 
55 respective alarm criteria. 

{0031] The console display includes a set of one word 
summary displays, where a subdisplay being located 
with a category shows a one word summary, -being a 
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subcategory descriptor or alann indication descriptor, 
for which a subcategory alarm counter equals the count 
of the co-located category and whose overall counts has 
the smallest number of alarm indications. In the pre- 
ferred embodiment of the present invention apparatus, 5 
the apparatus further includes a set of one word sum- 
mary priority subdisplays co-located with the categories, 
wherein a one word summary of a highest level priority 
is displayed. 

[0032] The apparatus also includes a mask/filter se- 10 
lection. The comparison software routine receives the 
mask/filter selection as an input parameter; and applies 
the mask/filter selection when a4justing each alarm 
counter. In the preferred embodiment of the present in- 
vention apparatus, the apparatus further includes a dy- is 
namic mask/filter criteria having a relevant association 
with the mask/filter selection. The comparison software 
routine further receives the dynamic mask/filter criteria 
as an input parameter and applies the dynamic mask/ 
filter criteria when adjusting each alarm counter. Also, 20 
the dynamic mask/filter criteria includes a dynamic 
alann limit table, where the comparison software routine 
receives the dynamic alarm limit as an input parameter 
and applies the dynamic alarm limit table to adjust a set 
of ranges for a set of operating range-type alarms in de- 25 
termining whether to adjust each alarm counter. 
[0033] The apparatus also includes an alphabetizing 
software routine that receives a subset of alarm indica- 
tions and input parameters, and outputs the subsets in 
an alphabetical order, thereby displaying a subset alarm 30 
indications in an organized and meaningful manner to 
the operator. The apparatus also includes a reference 
for a subset of categorizations and categories, indicat- 
ing a total number of associated received alarm mes- 
sages and total number of filtered alarm messages In 35 
one embodiment, a masked/filtered categorization, cat- 
egory, and alarm indications are displayed having an ef- 
fect from a group consisting of shading, color, font, and 
type style. 

[0034] The apparatus further includes a computer in- 40 
put/output device coupled to the console display, where- 
by an operator interacts with the alarm information. The 
display includes a display format selected from a group 
consisting of logs, battle ribbon alarm/event trends, 
alarm summary indicator matrices, and predictions/di- 45 
agnostic displays. Side log displays showing specific 
alarm information in an organized and meaningful man- 
ner are included in the preferred embodiment of the 
present invention. 

[0035] In an alternate embodiment of the present in- 50 
vention apparatus, there is a set of consoles, wherein a 
mask/filter selection is specific for each console. In one 
embodiment, the consoles are in communication via 
their respective interfaces, thereby allowing alarm mon- 
itoring mask/filter selections to be shared among the set ss 
of consoles. In an alternate embodiment, the console 
interface communicates in bidirectional manner, allow- 
ing a console to transmit a console specific mask/filter 



to the alarm system to inhibit alarm messages, thereby 
sharing the console specific mask/filter with the plurality 
of operator consoles. 

[0036] In the preferred embodiment of the present in- 
vention, the apparatus interface receives a plurality of 
alarm messages in an alarm message frame. The 
present invention parses and maps the alarm messages 
into the alarm indications by either the interface or a 
parsing software routine. The alarm analysis tools fur- 
ther include an external configuration file having a plu- 
rality of initialization values for variables used to provide 
the alarm information to an operator. 
[0037] The above and other features of the invention, 
including various novel details of construction and com- 
binations of parts, and other advantages, will now be 
more part icu larly described with reference to the accom- 
panying drawings and pointed out in the claims. It will 
be understood that the particular method and device 
embodying the invention are shown by way of illustration 
and not as a limitation of the invention. The principals 
and features of this invention may be employed in vari- 
ous and numerous embodiments without departing from 
the scope of the invention. 

BRIEF DESCBIPTION OF THE DRAWINGS 

[0038] In the drawings, like reference characters refer 
to the same pans throughout the different views. The 
drawings are not necessarily to scale, emphasis instead 
being placed upon illustrating principles of the invention. 

Fig. 1 is a schematic overview of an alarm system 
host computer data-linked to a process controller, 
where an alarm tools visual configuration applica- 
tion of the present invention provides an input con- 
figuration file to an alarm tools application; 
Fig. 2 is a block diagram of an embodiment of the 
present invention showing the alarm tools visual 
configuration having an input file, a visual configu- 
ration application window, and an output file, which 
is used by the alarm tools application as an input 
configuration file; 

Fig. 2A is a block diagram of the visual configuration 
application window of Fig. 2; 
Fig. 2B is a block diagram showing the alann anal- 
ysis tools application shown in Fig. 1 , its major com- 
ponents, and input files used for configuration. 
Fig. 2C is a flow diagram of the alarm analysis tools 
application of Fig. 1. 

Fig. 3 is a screen display of the application window 
of Fig. 2 illustrating a small input file alann list; 
Fig. 4 is a screen display of the application window 
of theFig. 3 illustrating a main alarm list and an input 
window selection portion within the alarm list; 
Fig. 5A is a screen display of the application window 
of Fig. 4 illustrating a selected full character pattern, 
the input window selection portion response, and 
the resulting temporary window list after an input 
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window list move operation; 
Fig. 5B is a screen display of the application window 
of Fig. 4 illustrating a selected beginning character 
pattern, the input window selection portion re- 
sponse to the selection, and the resulting temporary 5 
window list after a move operation; 
Fig. 5C is a screen display of the application window 
of Fig. 4 illustrating a selected ending pattern, the 
input window selection portion response to the se- 
lection, and the resulting temporary window list after 10 
an input window list move operation; 
Fig. 5D is a screen display of the application window 
of Fig. 4 illustrating a selected intermediate charac- 
ter pattern, the input window selection portion re- 
sponse to the selection, and the resulting temporary is 
window list after an input Window list move opera- 
tion; 

Fig. 6 is a flow diagram of the preferred embodiment 
of the present invention of Fig. 1 ; 
Fig. 6A is a flow diagram of an underlying process 20 
for a 'LoadAlarms' operation; 
Fig. 6B is 3 flow diagram of an underlying process 
for an input window selection move operation; 
Fig. 6C is a flow diagram of an underlying process 
for a temporary window purge operation; 2S 
Fig. 6D is a flow diagram of an underlying process 
for a temporary window selection delete operation; 
Fig. 6E is a flow diagram of an underlying process 
for a temporary window selection retain operation; 
Fig. 6F is a flow diagram of an underlying process 30 
for a temporary window selection move operation; 
Fig. 6G is a flow diagram of an underlying process 
for a temporary window transfer-all operation; 
Fig. 6H is flow diagram of an underlying process for 
an output window purge operation; ss 
Fig. 61 is a flow diagram of an underlying process 
for an output window 'SaveFile' operation; 
Fig. 6 J is a flow diagram of an underlying process 
for displaying user alarm indications selections in 
the input window selection portion; and *o 
Fig. 7 is a screen display of an application window 
of the present invention illustrating a selected end- 
ing, full, and beginning character patterns, the input 
window selection portion response to the selection, 
the resulting temporary window list after an input *s 
window list move operation, and the resulting output 
file window list after selection and move operations 
of a selection pattern in the temporary window list. 
Fig. 8 is a structural block diagram showing the ma- 
jor components of the alarm analysis tools applica- so 
tionof Fig. 1. 

Fig. 9 is a flow diagram illustrating the flow between 
major components of Fig. 8. 
Fig. 1 0 is a structural diagram of the user categories 
of Fig. 9. ~ ss 

Fig. 11 is a three dimensional illustration represent- 
ing the relationships among the elements contained 
in the category database of Fig. 9, namely catego- 



rizations, categories, alarm indications, and mask/ 
filters. 

Fig. 1 2 is a general display representation of the dis- 
plays shown in Fig. 8. 

Fig. 1 3 is the preferred embodiment of a display that 
is used to show alarm information to an operator, 
as graphically illustrated in Fig. 12. 
Fig. 14 is a flow diagram of a pattern category gen- 
erally shown in Fig. 9. 

Figs. 15 includes two examples of pattern catego- 
ries as generally represented in Fig. 14, and illus- 
trate pattern category metric calculations. 
Figs. 16Aand 16B are general predictions/diagnos- 
tic displays relating information of Fig. 14 to an op- 
erator. 

Fig. 17A is a time chart illustrating a use of a dy- 
namic alarm adaptation table, where an alarm set- 
ting is related to a prediction, graphically illustrated 
in Fig. 14. 

Fig. 17B is an illustration of a timechart parabolic 
interpolation to estimate alarm point crossings and 
peak excursion of an example of an alarm pattern 
of Fig. 16A. 

Fig. 16 is an alarm bit string, having an associated 
alarm directory, used to represent received alarm 
messages by the alarm analysis tools application of 
Fig. 1. 

Fig. 19 is a bit matrix having an alarm bit string, a 
category bit string 1 , and category bit string 2 for 
processing the alarm indications, in accordance 
with Fig. 9. 

Fig. 20 is a bit matrix of a simple category and one 
word summary for determining a one word summa- 
ry intersection for Fig. 13. 

Fig. 21 is a bit matrix showing an alarm bit string 
mask/filter and filtered alarms for use in determining 
the underlying alarm message handling for Fig. 1 3. 
Fig. 22 is an illustration for an advanced method of 
handling large bit strings for the alarm application 
tools of Fig. 1. 

Fig. 23 is a block diagram of an alarm analysis tools 
of Fig. 1 , where a set of operator consoles are used 
to monitor alarms in an alarm system. 
Figs. 24-40 are typical graphical user interface win- 
dows for an example application for which the alarm 
analysis tools application 50 of Fig. 1 has been con- 
figured to monitor alarms for a styrene plant. 

DETAILED DESCRIPTION OF THE PREFEFIRED 
EMBODIMENTS 

[0039] Fig. 1 is an illustration of a computer network 
environment in which the present invention is deployed. 
Briefly, an alarm system host computer 6 cummunicates 
to a set of process controllers 4 via an alarm system 
host computer data communication link 5. An alarm 
tools auxiliary computer 8 taps into the alarm system 
host computer data communication link 5 via an alarm 
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tools auxilliary computer data communication link 7. In 
the preferred embodiment of the present invention, the 
alarm tools auxilliary computer 8 has I/O (input/output) 
accessories, such as a computer mouse 9 comprising 
a computer mouse button 19. Other cursor control de- 
vices and input means (e.g. keyboards and the like) are 
suitable. 

[0040] An alann message frame 70, issued by the 
process controllers 4 to the alarm system host computer 
6 via the alarm system host computer data communica- 
tion link 5, is received by the alarm system host compu- 
ter 6. The alarm tools auxilliary computer 8 simultane- 
ously receives the alarm message frame 70 via the 
alarm tools auxiliary computer data communicaton link 
7. The received alarm message frame 70 is processed 
by an embodiment of an alarm tools application 50 
which resides on the alarm tools auxiliary computer 8. 
The alarm tools application 50 is preconfigured and dis- 
plays a set of alarm messages 65 in accord with re- 
ceived information from the present invention alarm 
tools visual configuration application 40. 
[0041] The alarm message frame 70 is generated by 
the process controllers 4 in response to receiving alann 
signals 60 from process sensors 2 via process control- 
ler/sensor links 3. Alarm signals 60 may be issued from 
a process sensor 2 due to an out-of-range detection a 
failure detection, or a malfunction of a process sensor 2. 
[0042] In the preferred embodiment, all possible 
alarm messages 65 that are transferred in the alarm 
message frame 70 in response to a process controller 
4 having received an alarm signal 60 are known by the 
alann tools visual configuration application 40. In some 
instances, the alarm messages 65 are determined, or- 
ganized, and categorized prior to an alarm system in- 
stallation; other times, the alarm messages 65 are cre- 
ated in an evolutionary fashion, along with their associ- 
ated process control systems (i.e. process controllers 4, 
links 3 and processor sensors 2). 
[0043] Fig. 2. shows a block diagram of the alarm 
tools visual configuration application 40 that has been 
constructed according to the principles of the present 
invention. In the preferred embodiment of the presem 
invention apparatus 40, a visual configuration applica- 
tion window 100 has a GUI (Graphical User Interface), 
and the steps for interacting with the visual configuration 
application window 100 are performed in a GUI fashion. 
The present invention method and apparatus are imple- 
mented in a compiled, high level, programming lan- 
guage, preferably "C". Other programming languages 
are suitable, such as Basic, Fortran, Pascal, Visual Ba- 
sic, Visual "C, etc. 

[0044] An input file 10 is in text file format in the pre- 
ferred embodiment of the present invention. In another 
embodiment, the input file 10 is a binary file or other file 
format to save disk space. A read input file link 15 re- 
trieves from the input file 10 an input file alarm list 12 
having a set of input file alarm list indications 13. 
[0045] The visual configuration application window 



100 includes a user interface and a set of software rou- 
tines to process an alarm list. The visual configuration 
application window 100 receives the input file alann list 
1 2 from the read input file link 15 and transmits a proc- 
5 essed alarm list across a write output file link 25 to an 
output file 30. 

[0046] The output file 30 having an output file alarm 
list 32 is in a text file format in the preferred embodiment 
In another embodiment, the output file 30 is in binary or 

10 other file format to save disk space. The output file alarm 
list 32 is formed of output file alarm list indications 33. 
[0047] The alarm tools application 50 reads the output 
file alarm list 32 from the output file 30 of the alarm tools 
visual configuration application 40. The alann tools ap- 

is pHcat ion 50 uses the output file alarm list 32 to configure 
itself for operation. 

[0048] Fig. 2A shows an embodiment of data flow in 
the visual configuration application window 100 of the 
invention alarm tools visual configuration application 40. 

20 The visual configuration application window 100 com- 
prises an input window 110, a temporary window 120, 
and an output window 130. These windows 110, 120, 
130 are collectively referred to as application sub win- 
dows 102. In the preferred embodiment of the present 

2$ invention, the application subwindows 102 have GUI in- 
terfaces. 

[0049] The input window 1 1 0 is used to display an in- 
put window list 112. In the preferred embodiment, the 
input window list 112 is the input file alarm list 12 re- 
30 ceived from the input file 10 (Fig. 2). In an alternate em- 
bodiment, the user is queried at run-time to enter an in- 
put window list 112. 

[0050] The temporary window 1 20 displays a tempo- 
rary window list 122, which is a subset of the input win- 
as dow list 1 1 2. The temporary window list 1 22 is received 
from the input window 110 via an input window to tem- 
porary window transfer 123. 

[0051] The output window 130 displays a subset of 
the temporary window list 122 as an output window list 
40 132. The output window 130 receives the subset (an 
hence output window list 132) from the temporary win- 
dow 120 Via a temporary window to output window 
transfer 125. 

[0052] Fig. 3. is an example of an end user (operator) 
45 screen view of a visual conf igu ration application window 
100. In the preferred embodiment of the present inven- 
tion apparatus, the screen view of the visual configura- 
tion application window 100 has an upper portion com- 
prising a set of application subwindows 102, and a lower 
so portion comprising a command button area 210. The 
command button area 210 is formed of a plurality of 
command buttons 220 or other suitable means for ef- 
fectuating corresponding operations. The application 
subwindows 102 display the alarm list indications on 
S5 which the underlying operations corresponding tocom- 
mand buttons 220 act. 

[0053] In an embodiment of the present invention, the 
application subwindows 102 are vertical columns in the 
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visual configuration application window 100. In the pre- 
ferred embodiment, the input window 110, temporary 
window 120, and output window 1 30 are arranged from 
left to right, respectively, each of these application sub- 
windows 1 02 include text representing the alarm list in- 
dications, where the alarm lists 112, 122, 132 (Fig. 2A) 
are preferably a list of alarm codes in acronym format. 
Other formats which allow large numbers of alarm en- 
tries (i.e. indications of alarms) to be simultaneously dis- 
played are suitable. For example, in another embodi- 
ment, icons representing the alarm list indications are 
displayed in the application sub windows 102 (i.e. win- 
dows 110, 120, 130.) 

[0054] The input window 1 1 0 comprises standard GUI 
window features. There is a scroll bar 105a comprising 
a scroll bar up Arrow 106a and a scroll bar down arrow 
107a. The input window list 112 is displayed in a GUI 
window contents region 1 04a controlled by the scroll bar 
105a. 

[0055] Likewise, the temporary window 120 includes 
standard GUI window features. There is a scroll bar 
105b comprising a scroll bar up arrow 106b and a scroll 
bar down arrow 1 07b. As seen in later figures, a tempo- 
rary window list 122 is displayed in a GUI window con- 
tents region 104b controlled by the scroll bar 105b. 
[0056] Also, the output window 1 30 comprises stand- 
ard GUI window features, There is, a scroll bar 105c 
comprising a scroll bar up arrow 106c and a scroll bar 
down arrow 1 07c. As seen in later figures, an output win- 
dow list 1 32 is displayed in a GUI window contents re- 
gion 104c controlled by the scroll bar 105c. 
[0057] The input window selection portion 140 com- 
prises standard GUI window features. The input window 
selection portion 1 40 is located at the bottom of the input 
window 110. There is a scroll bar 105d comprising a 
scroll bar up arrow I06d and a scroll bar down arrow 
1 07d. The contents of the input window selection portion 
140 input window list entries 11 2 currently selected and 
selection window criteria, as further explained later. 
[0058] The command button area 210 is the shaded 
portion located at the bottom of the visual configuration 
application window 100. In the command button area 
210, there are command buttons 220. Each command 
button 220 is positioned beneath the respective subwin- 
dow 102 on which the command button 220 operates. 
In the preferred embodiment, the command buttons 220 
have icons graphically indicating their respective func- 
tions. 

[0059] The following list includes the command but- 
tons 220 of the preferred embodiment of the present in- 
vention: 

[0060] LoadAlarms button 222: 

loads the input file list 12 from a selected input file 

10. 

[0061] M- button 225: 

(show below and to the left of the temporary win- 
dow 120) causes selected alarm indications from the in- 
put window 110 to be cumulatively transferred to the 



temporary window 1 20. 
[0062] x button 232: 

clears the corresponding temporary window 1 20: 
[0063] v button 234: 
5 causes the selected alarm indications in the tem- 

porary window 120 to be deleted. 
[0064] a bim on 236: 

causes only the selected alarm indications to be 
kept in the temporary window 120. 
10 [0065] M- button 238: 

transfers selected alarm indications from the tem- 
porary window 1 20 to output window 1 30. 
[0066] - button 239: 

causes all alarm indications to be transferred from 
15 the temporary window 1 20 to the output window 1 30. 
[0067] x button 242: 

clears the corresponding output window 130. 
[0068] SaveFile button 244: 

saves the output window 1 30 to a selected, named 
20 output file 30. 

[0069] Fig. 4 illustrates an input window 110 having a 
larger input window list 112 than in the previous discus- 
sion. Also illustrated is the input window selection por- 
tion 140 having an input window selection list 142a. The 
25 input window selection list 142a indicates an input win- 
dow selection criteria list 144a. 
[0070] When the LoadAlarms button 222 is activated, 
used without the input window 1 10 having been cleared, 
an input Window list 112 appears in the input window 
30 110. In an alternate embodiment, a default input window 
list 1 1 2 is always displayed in the input window 110. Until 
a move operation occurs, no lists are displayed in the 
temporary window 120 and output window 130. In the 
example of Fig. 4, the user has previously selected a 
3$ substring or partial character pattern 115 beginning with 
■L'. In response, the input window selection portion 1 40 
displays an input window selection list 142a, with input 
window selection criteria list I44a, having selection cri- 
teria "L*". Preferably, the "L*" indicates that a wildcard 
40 is being used, such that an alann indication in the input 
window list 112 beginning with a letter V is moved to 
the temporary window 120 if an M-button 225 command 
is issued. 

[0071] Fig. 5A illustrates an input window 110 having 
45 an input window list 112. The input window list 112 is 
read from an input file 1 0 in response to a user's select- 
ing the LoadAlarms button 222. In the embodiment 
shown, a 'mouse click" on the graphical representation 
of the LoadAlarms button 222 is a method of selecting 
50 that button and effectuating the corresponding bad op- 
eration. 

[0072] A selected full character pattern 114 is shown 
in the input window list 11 2 by the use of a highlighted 
portion. The selected full character pattern 114 is also 
55 represented in the input window selection criteria list 
1 44b. Note that the full character pattern of each select- 
ed alann indication in the selected full character pattern 
114 is shown in the input window selection criteria list 



15 



EP 0 959 398 A1 



16 



144b, and that there are no wildcard entries (i.e., "*"). 
[0073] The temporary window 1 20 displays a tempo- 
rary window list 1 22. The temporary window list .122 re- 
sults from an M-bunon 225 operation after an input win- 
dow selection criteria has been entered by a user (as 
indicated by input window selection criteria list 144b). 
[0074] Restated, Case 1 of M- button 225 cases is: 
consecutive complete alarm indications selected by a 
single selection are all transferred. Because the tempo- 
rary window list 122 accumulates, additional alarm indi- 
cations may be added to the temporary window list 122 
by making another selection in the input window list 112 
and operating M- button 225. 
[0075] In the preferred embodiment, a computer 
mouse input device 9 controlling a GUI window text cur- 
sor is used to select alarm list entries, and the resulting 
selection is shown in inverse text (e.g., the selected full 
character pattern 114). In an alternate embodiment, a 
change of text color is used to represent a selection. 
Still, in a further embodiment, alarm icons are dragged 
and dropped to make a selection. 
[0076] Fig. 5B is another illustration of input window 
1 1 0 having an input window list 1 1 2. Shown is a selected 
beginning partial character pattern 115, also reported in 
input window selection criteria list 1 44c. After an M- but- 
ton 225 command, the temporary window list 122 re- 
ceives a subset of the input window list 112 in response 
to the selected beginning partial character pattern 115. 
In the illustrated example, the temporary window list 1 22 
entries all begin with an "F B , thereby showing the results 
of a wildcard entry, "F*", as seen in the input window 
selection criteria list 1 44c. This is Case 2 of the M- button 
225 cases: selected beginning partial character patterns 
(substrings) 115 are used to select all alarm indications 
that have the same beginning characters as the select- 
ed pattern/substring 115. 

[0077] Fig 5C is another illustration of an input window 
1 1 0 having an input Window list 1 1 2. Shown is a select- 
ed ending partial character pattern 116. After an M- but- 
ton 225 command, the temporary window list 122 re- 
ceives a subset of the input windowlist 112 in response 
to the selected ending partial character pattern 116. No- 
tice that the temporary window list 122 entries all end 
with a 'IT*, thereby showing the results of a wildcard en- 
try, "*1T", as indicated in the input window selection cri- 
teria list 1 44d. This is Case 3 of the M- bunon 225 cases: 
selected ending partial character patterns 116 are used 
to select all alarm indications that share the same end- 
ing characters as the selected pattern 116. 
[0078] Fig. 5D is another illustration of an input win- 
dow 110 having an input Window list 112. Shown is a 
selected intermediate character pattern (substring) 117, 
also reported in input window selection criteria list 1 44e. 
After an M- button 225 command, the temporary window 
list 1 22 receives a subset of the input window list 11 2 in 
response to the selected intermediate partial character 
pattern 117. Notice that the temporary window list 122 
entries all contain an "X2", thereby showing the results 



of a wildcard entry, '*X2*', as indicated in the input win- 
dow selection criteria list 1 44e. This isCase 4 (last case) 
of the M- button 225 cases: selected intermediate {nei- 
ther beginning nor ending) partial character patterns 
s (substrings) 1 1 7 are used to select all alarm indications 
that share the same embedded or intermediate consec- 
utive characters. 

[0079] In alternate embodiments of the present inven- 
tion, other wildcard indicators are used in addition to "*", 
10 includingbut not limitedto "?", "$", "... a to represent "any 
other text character(s>." 

[0080] Fig. 6 shows a flow diagram 300 of the pre- 
ferred embodiment of the present invention. In general, 
the alarm tools visual configuration application 40 be- 
ts gins by initializing the input window 110 with an alarm 
input file 10 in Step 310, and ends when the answer to 
a query of whether the user has finished selecting 
alarms in Step 325 is "YES", resulting in exiting the 
alarm tools visual configuration application 40 in Step 
20 360. 

[0081] Initializing the input window 110 with an alarm 
input file 10 in Step 310 begins the visual configuration 
application 40 and the user's selection of alarm indica- 
tions. This step commences by operating (i.e., select- 

& ing) the LoadAlarms button 222. The next step is to list 
the input window list 112 in a sensibly grouped order in 
step 320 in the input window 110. in the preferred em- 
bodiment, arranging the input window alarm list 112 in 
a sensibly grouped order in step 320 means arranging 

30 the input window list 11 2 alphabetically by alarm name. 
[0082] Next, a query as to whether the user is at the 
end of alarm selection in Step 325 is asked. If the answer 
is "YES", the visual configuration application 40 exits in 
Step 360. If the answer is "NO", then a load input file 

35 query in Step 335 is determined. 

[0083] If the answer to the LoadAlarm input file query 
in Step 335 is "YES" (i.e., the LoadAlarms button 222 
was selected), then an initialize input window 110 with 
an alarm input file 10 is performed in Step 310. If the 

40 answer to the LoadAlarm input file query in step 335 is 
"NO", then a save output window alarm list to file query 
in Step 345 is asked. 

[0084] If the save output window alarm list-to file query 
in Step 345 is answered 'YES', then a save output win- 

45 dow alarm list to a specified file in Step 330 is performed. 
(Note that the SaveFile button 244 was selected by the 
user to reach this step.) If the answer to the save output 
window alarm list to file query in Step 345 is "NO", then 
a perform list selection operation query in Step 355 is 

so asked. Also, in one embodiment of the present invention 
method, in the save output window alarm list to a spec- 
ified file Step 330, a standard GUI "savefile" message 
box gives the user the ability to specify what the output 
file 30 name is and in which disk directory the output file 

ss 30 is to be saved. 

[0085] if the perfonn list selection operation in Step 
355 is answered "YES", then the present invention per- 
forms a desired operation on the selected list in Step 
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340. After performing the desired operation on the se- 
lected list in Step 340 is performed, the preferred em- 
bodiment alphabetizes (or otherwise orders) the lists in 
Step 350 in all of the subwindows 102. Then, the per- 
form list selection operation query in Step 355 is asked s 
again. If the perform list selection operation query in step 
355 is "NO", then the end of alarm selecting query in 
Step 325 is asked again, and operation continues as de- 
scribed above. 

[0086] Figure 6A shows a set of process steps of the 
present invention method for when a user issues a 
LoadAlarms button 222 command, such as at step 335 
in Fig. 6. The LoadAlarms button 222 allows the user to 
have an input file 10 read into the input window list 112 
and displayed in the input window 110. 
[0087] The LoadAlarms set of process steps begins 
by receiving a LoadAlarms command in step 400. This 
initiates an open input file process in step 403, where 
an input file alarm list 12 is read from the input file 10. 
The open input file process in step 403 facilitates conu- 
nunication between the visual configuration application 
40 and the input file 1 0. In an embodiment of the present 
invention, a typical graphical user interface query win- 
dow is used to enable the user to specify the input file 
10 to be loaded by the alarm tools visual configuration 
application 40. 

[0088] A read input file occurs in step 406. The read 
input file in step 406 uses various methods to read in 
the input file alarm list 12, depending on the format of 
the input file 10. For example, the input file 10 in the 
preferred embodiment of the present invention is a text 
file format, so a text-file read format is employed. Binary 
files and other file formats in other embodiments of the 
present invention use read input file 10 protocols in step 
406 appropriate for the given file format. 
[0089] The close input file process in step 409 occurs 
next. Closing the input file after a read operation is tra- 
ditionally used as a safety method to ensure the input 
file 10 does not get corrupted. 
[0090] The input file alarm list 12 is then arranged in 
the input window list in step 412, where the input file 
alarm list indications 13 are arranged in a sensibly 
grouped order, preferably alphabetically. Icons and text 
are also arranged in a sensibly grouped order when 
there is that combination of alarm indications; the same 
is true for additional types of alarm indications. 
[0091] The input window 1 1 0 is cleared in step 41 5 in 
preparation of the next step. Next, the input window list 
112 is displayed in the input window 110 in step 418. 
The new input window list 112 is also referred to as a so 
"main alarm list" 112. 

[0092] After the above procedure has taken place, the 
LoadAlarms process then returns to a calling routine in 
step 421 . In particular, control returns to step 335 in Fig. 
6 of the main flow diagram 300 of the present invention. 55 
[0093] Fig. 6B is an underlying process of an M-> but- 
ton 225 command. After receiving an M-> button 225 
command in step 425, this routine loads an input window 



selection in step 428. In one embodiment of the present 
invention, the selection is stored in memory in the aux- 
iliary computer 8 and is accessed through arrays, linked 
lists, or other data structure types used for handling 
groups of items having similar properties as the user se- 
lection. 

[0094] A parsing of the input selection in step in 431 
occurs after the input selection is loaded in step 428. 
The parsed selection separates the received selection 
data into (1) full character patterns 114, (2) beginning 
character patterns 115, (3) ending character patterns 
116, and (4) intermediate character patterns 117. 
[0095] Scanning for and retrieving full character pat- 
terns 114 occurs in step 434. Scanning in this context 
means to search through the input window list 112 and 
find matches for the full character patterns 114 in the 
alarm indications. Retrieving matches occurs in step 
434, wherein matching alarm indications from input win- 
dow list 112 are stored in a temporary location for further 
referencing. 

[0096] Scanning for and retrieving beginning partial 
character patterns 115 occurs in step 437. In this case, 
scanning the input window list 11 2 is performed, where- 
by any input window list 112 alarm indications having a 
same beginning character pattern as the selected be- 
ginning partial character pattern 115 is retrieved and 
stored in a temporary location. 
[0097] Scanning for and retrieving the ending partial 
character pattern 116 matches occurs in step 440. The 
scanning looks through the input window list 11 2 for any 
input window list 112 alarm indications having a same 
ending character pattern as the selected ending partial 
character pattern 116. Any matches are retrieved and 
stored in a temporary location. 
[0098] Scanning for and retrieving the intermediate 
partial character pattern 117 matches occurs in step 
443. The scanning looks through the input window list 
112 alarm indications for any pattern having a same in- 
termediate pattern as the selected intermediate partial 
character pattern 117. Any matches are retrieved and 
stored in a temporary location. 
[0099] All alarm indications retrieved and stored in a 
temporary location in steps 434, 437, 440, 443 are add- 
ed to the temporary window list 1 22 in step 446. Prefer- 
ably, step 446 performs an aggregation to the temporary 
window list 1 22, not a delete and replace operation. That 
allows a user to perform multiple input window 110 se- 
lections to increase the temporary window list 122. 
[01 00] Rearranging the aggregate temporary window 
list 122 in step 449 occurs after receiving the additional 
alarm indications in step 446. A rearranging in step 449 
arranges alarm indications in the temporary window list 
122 into a sensibly grouped order, preferably alphabet- 
ically, as before, but now includes the added alann indi- 
cations from step 446. 

[0101] Because some of the alarm indications in the 
aggregate temporary window list 122 can be the same 
due to aggregation in the selection process, a removing 
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duplicates operation in step 452 is performed. In one 
embodiment, the removing duplicates operation in step 
452 occurs after the arranged temporary window list in 
step 449. There is an efficiency in this arrangement of 
steps 449 and 452 because the alphabetizing of the pre- 5 
ferred embodiment makes removing duplicates in step 
452 a fast task due to duplicates being next to each other 
in the aggregate temporary window list 122. In turn, 
searching for duplicates is made to be a faster process 
than if the aggregating window list 122 is not in alpha- to 
beticai order. The resulting temporary window list 1 22 is 
displayed in the temporary window 120 in step 455. In 
one embodiment of the present invention, the previous 
temporary window list 122 is merely overwritten by the 
resulting temporary window list 1 22, so a clear window is 
operation is unnecessary. 

[0102] After performing the M-4 button 225 command 
procedure, a return to the calling routine in step 458 en- 
ables the alarm tools visual configuration application 40 
flow diagram 300 of Fig. 6 to resume normal operation, 20 
thereby allowing a user to make further modifications 
toward the end goal. 

[0103] Fig. 6C shows an V button 232 command 
process steps. A receive V button 232 command is re- 
ceived in step 460. After receiving an x button 232 com- 25 
mand, the visual configuration application 40 purges the 
temporary window list 122 in step 463. After the purging 
step 463, an empty temporary window list 122 is dis- 
played in the temporary window 1 20 in step 466. In other 
words, an empty temporary window list 1 22 displays no 30 
alarm indications in the temporary window 120. In an 
embodiment of the present invention, the temporary 
window list 122 contains enough data element space 
such that the temporary window 120 will display no 
alarm indications when displaying an empty window list 35 

In an alternate embodiment, the display temporary 
window list 1 22 in step 466 also contains a clear the tem- 
porary window 120 process such that the temporary 
window 120 shows no alarm indications after the x but- 
ton 232 is used by the user. ao 
[0104] After performing the x button operation, a re- 
turn to the calling routine is performed in step 469 and 
control is given back to the alarm tools visual configura- 
tion application 40 to enable the user to continue oper- 
ation. AS 
[0105] Fig. 6D show, a V button 234 process steps. 
After receiving a V button 234 command in step 470, a 
temporary window selection is loaded in step 473. This 
means that any highlighted (and hence user selected) 
text, icons, or other alarm indications in the temporary so 
window 120 are going to be part of the operation dis- 
cussed below. 

[0106] A parsing of the selection occurs in step 476. 
There are four different groups into which the selection 
can be parsed: (1 ) selected full character patterns 114, & 
(2) selected beginning partial character patterns 115, (3) 
selected ending partial character patterns 116, and (4) 
selected intermediate partial character patterns 117. 



[0107] First, scanning and deleting the selected full 
character patterns 1 1 4 is performed in step 479. A scan- 
ning of the temporary window list 122 finds any matches 
for the selected full character pattern 114. Likely, the on- 
ly match is the selected full character pattern 114 itself. 
Deleting removes any found selected full character pat- 
tern 114 matches from the temporary window list 122. 
[0108] Second, scanning and deleting in step 482 is 
performed to search for and delete matches in the tem- 
porary window list 122 having the same character pat- 
tern as the selected beginning partial character pattern 
1 1 5. The scanning step of the temporary window list 1 22 
looks for any alarm indications having th6 same begin- 
ning partial character pattern as the selection. The de- 
leting step removes any alarm indications having the 
same beginning partial character pattern as the selected 
beginning partial character pattern 115 from the tempo- 
rary window list 122. 

[0109] Third, scanning and deleting in step 485 oc- 
curs wherein scanning of the temporary window list 1 22 
is done to find any alarm indications having the same 
ending partial character pattern as the selected ending 
partial character pattern 116. Any found matches are de- 
leted in step 485 from the temporary window list 122. 
[0110] Fourth, scanning and deleting for the selected 
intermediate partial character pattern 117 occurs in step 
488. Here, a scanning of the temporary window list 122 
looks for any alarm indications having a same interme- 
diate partial character pattern as the selected interme- 
diate partial character pattern 117.*Found matches are 
deleted in step 488. 

[0111] After the scanning and deleting in steps 479, 
482, 485, 488 are complete, arranging of the temporary 
window list 1 22 occurs in step 491 in which the tempo- 
rary window list 122 is again arranged in a sensibly 
grouped order, preferably alphabetically. Non-deleted 
alarm indications are shifted forward in the list to fill in 
locations in the temporary window list 122 from which 
selected alarm indications were deleted, thereby leav- 
ing no gaps in the temporary window list 122 displayed 
in the temporary window 120. The displaying of the re- 
sulting temporary window list 122 occurs in step 494. 
[0112] After the resulting temporary window list 122 
has been displayed in the temporary window 120 in step 
494, the V button 234 process is completed and a return 
to a calling routine occurs in step 497. The main flow 
diagram 300 (Fig. 6) of the visual configuration applica- 
tion 40 now has control to enable the user to continue 
processing alann indications. 
[0113] Fig. 6E shows the process for a w button 236. 
After receiving the w button 236 command in step 500, 
this process loads the temporary window selection in 
step 503. The temporary window selection comprises 
alarm indications in the temporary window list 122. 
[0114] A parsing of the temporary window selection 
occurs in step 506. Parsing breaks the user input selec- 
tion into four groups: (1 ) a selected full character pattern 
114, (2) a selected beginning partial character pattern 
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115, (3) a selected ending partial character pattern 116, 
and (4) a selected intermediate partial character pattern 
117. Scanning for each of these selection groups fol- 
lows. 

[01 15] A scanning and storing for the selected full par- 
tial character pattern 114 in the temporary window list 
122 occurs in step 509. First, the scanning of the tem- 
porary window list 1 22 in the temporary window 1 20 for 
alarm indications matching the subselection (1 ) occurs. 
Then, any matches are stored in a keep-only memory. 
[0116] A scanning and storing operation in step 512 
occurs next. A scanning of the temporary window list 
122 in the temporary window 120 for alarm indications 
matching the subselection (2) looks for any matches 
having the same beginning partial character pattern 
115. All matching alann indications are stored in a keep- 
only memory. 

[0117] A scanning and storing operation in step 515 
occurs next, where scanning of the temporary window 
list 122 in the temporary window 120 for alarm indica- 
tions matching the subselection (3) occurs. Then, any 
alarm indications found as a match of the ending partial 
character pattern 1 1 6 are stored in a keep-only memory. 
[0118] A scanning and storing operation in step 518 
occurs next. First, scanning the temporary window list 
122 in the temporary window 120 for alarm indications 
matching the subselection (4) occurs. Second, after the 
scan, alarm indications found as a match are stored in 
a keep-only memory. 

[0119] The temporary window list 122 is reinitialized 
in step 521 with all alarm indications found as matches 
in steps 509, 512, 515, 518 and having been stored in 
the keep-only memory. The temporary window list 122 
is essentially over-written with only those alarm indica- 
tions having been found to be matches. The rest of the 
temporary window list 122 is cleared of any alarm indi- 
cations. 

[01 20] The resulting temporary window list 1 22 is ar- 
ranged in a sensibly grouped order, preferably alpha- 
betically, in step 524 after having been reinitialized in 
step 521. Continually arranging the window lists in a 
sensibly grouped order is intended, to keep lists orderly 
and consistent for the user 

[0121] A display of the temporary window list 122 is 
performed in step 527, where the ordered, resulting tem- 
porary window list 1 22 is displayed in the temporary win- 
dow 120. An older temporary window list 122, having 
been reduced in size by the w button operation, is 
cleared in an embodiment of the present invention be- 
fore the reinitialized temporary window list 122 is dis- 
played. 

[0122] A return to a calling routine occurs in step 530, 
thereby giving control back to the alarm tools visual con- 
figuration application 40 (flow diagram 300. Fig. 6) to 
enable the user to continue selecting alarm indications. 
[0123] Fig. 6F shows a temporary window 'M-*' but- 
ton 238 operation. The button 238 represents a 
mouse (i.e., computer mouse) selection move opera- 



tion, whereby alarm indications in the temporary window 
list 122 matching a user's selection are copied into the 
output window list 132 and displayed in the output win- 
dow 130. 

s [0124] An M-» button command is received in step 
535. Then, a temporary window selection is loaded in 
step 536 and parsed in step 541 . 
[0125] In the parsing operation in step 541 , the selec- 
tion is parsed into four groups: (1) a selected full char- 

io acter pattern 114, (2) a selected beginning partial char- 
acter pattern 1 1 5, (3) a selected ending partial character 
pattern 1 1 6, and (4) a selected intermediate partial char- 
acter pattern 1 1 7. The temporary window list 1 22 is next 
scanned for alarm indications matching the user select- 

15 ed alarm indication character patterns of these four 
groups. 

[0126] Ascanning and retrieving operation in step 544 
scans the temporary window list 122 in the temporary 
window 120 for alarm indications matching the subse- 

20 lection (1 ). All matching alann indications are copied into 
the output window list 132. Note that in the preferred 
embodiment, the updated output window list 132 is not 
immediately displayed in the output window 130; only 
after the entire M-> button operation sequence has been 

25 completed does a display update occur so that the sub- 
windows 1 20, 1 30 do not have continual updates, there- 
by being distracting to the user. 
[0127] A scanning and retrieving operation in step 547 
occurs, wherein the temporary window list 122 in the 

30 temporary Window 1 20 is scanned for alarm indications 
matching the subselection (2). All matching alarm indi- 
cations In the temporary window list 122 are copied to 
the output Window list 1 32. 

[01 28] A scanning and retrieving operation in step 550 
35 occurs, wherein the temporary window list 122 in the 
temporary window 120 is scanned for alarm indications 
matching the subselection <3). All matching alarm indi- 
cations having a same ending pattern as the selected 
ending partial character pattern 116 are copied to the 
40 output window list 1 32. 

[01 29] A scanning and retrieving operation in step 553 
occurs, wherein the temporary window list 122 in the 
temporary window 120 is scanned for alarm indications 
matching the subselection (4). Then, all matching alarm 
45 indications in the temporary window list 122 having a 
same character pattern as the selected intermediate 
partial character pattern 117 is retrieved and copied to 
the output window list 132. 

[0130] In step 556, the additions resulting from steps 
50 544, 547, 550, 553 are aggregated in the output window 
list 132, as opposed to overwriting. 
[0131] In step 559, the output window list 132 is ar- 
ranged in a sensibly grouped order, preferably alpha- 
betical. Again, having the window lists kept in a sensibly 
55 grouped order helps the user to concentrate on the task 
at hand. 

[01 32] In step 562, duplicate alarm indications are re- 
moved from the output window list 132. In an embodi- 
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ment ol the present invention, the output window list 1 32 
is concatenated to have spaces removed from between 
alarm indication. 

[01 33] Displaying the resulting output window list 1 32 
occurs in step 565. In the preferred embodiment of the 
present invention, the display happens after the bulk of 
the M-> button 238 operation occurs so that there is a 
single update of the output window 130 rather than mul- 
tiple updates, so as not to interrupt the user's train of 
thought. 

[01 34] In step 568, a return to a calling routine is per- 
formed, giving control back to the alarm tools visual con- 
figuration application 40 (e.g., flow diagram 300 Fig. 6) 
to enable the user to continue selecting alarm indica- 
tions. 

[0135] Fig. 6G shows the underlying process for the 
button 239 command. The button 239 basically 
copies the entire contents of a temporary window 120 
to the output window 130. 

[0136] A received -> button 239 command occurs in 
step 570. A copy transfer of the temporary window list 
122 to the output window list 132 occurs in step 573. 
[0137] The output window list 132 is arranged in a 
sensibly grouped order, preferably alphabetical, in step 
576 for reasons discussed above. Any duplicate alarm 
indication is removed in step 579. Again, this step is 
made easier after the arranging (ordering) of the output 
window list 1 32 occurs in step 576. 
[0138] Once all earlier steps are performed, the out- 
put window list 1 32 is displayed in step 582 in the output 
window 130. This display occurs only at the end of the 
-> button 239 operation so as not to interrupt the user's 
train of thought, as stated above. 
[01 39] After the button 239 command process has 
completed, a return to the calling routine in step 585 is 
performed. The alarm tools visual configuration applica- 
tion 40 (flow diagram 300) again has complete control 
so as to enable the user to continue selecting alarm in- 
dications. 

[0140] Fig. 6H shows the underlying process for the 
V button 242 that resides beneath the output window 
130 in the application window 100. Like the temporary 
window 120 'x' button 232, the output window 130 V 
button 242 also deletes the entire contents of the alarm 
indications in a subwindow 102, and, in particular, the 
output window 130 below which it resides. 
[0141] The V button 242 command is received in step 
588. Afterward, the output window list 132 is purged of 
aiann indications in step 591 . The newly purged output 
window list 1 32 is then displayed (step 594) in the output 
window 1 30. In an embodiment of the present invention, 
the output window list is large enough to fill the entire 
output window 1 30 with blanks, thereby clearing the en- 
tire output window 1 30 of all previously displayed alarm 
indications. In another embodiment, step 594 further 
comprises a clearing step of the output window 130 in 
case the purged output window list 132 is not normally 
large enough to clear the output window 130 when dis- 



played. 

[0142] A return to the calling routine in step 597 next 
occurs, thereby giving control back to the alarm tools 
visual configuration application 40 (flow diagram 300) 
5 allowing the user to continue selecting alarm indica- 
tions. 

[0143] Fig. 61 shows the underlying process behind 
the 'SaveFile* button 244 which is located beneath the 
output window 130. The SaveFile button 244 basically 

10 saves the entire alarm indications listing shown in the 
output window list 132 to an output file 30 for later use 
by an alarm tools application 50. 
[0144] A received SaveFile button 244 command is 
received in step 600. In response to the SaveFile button 

1$ 244 command in step 600, an open output file 30 occurs 
in step 603. Having the output file 30 open enables ,a 
write output window list 1 32 in step 606 to occur. 
[0145] The write output window list 132 in step 606 
stores the output window list 132 that is currently dis- 

20 played in the output window 1 30 to a storage medium. 
Typically, the storage medium is a local hard disk in a 
computer 8; other storage medium are optical dnves, 
network servers, RAM, or other storage memory from 
which the data is retrievable. In the preferred embddi- 

25 ment, the write output window list 1 32 in step 606 gen- 
erates an output file 30 having text format; however in 
an alternate embodiment, other file formats are used, 
such as binary. 

[0146] After having written the output window list 1 32 

30 to an output file 30 in step 606, a close output file 30 in 
step 609 is performed to ensure that output file 30 is 
properly closed so that it does nor become corrupt. The 
return to the calling routine in step 61 2 follows step 609, 
which concludes the SaveFile button 244 routine. 

35 [0147] Fig. 6J shows the underlying process for dis- 
playing a selection in the input window selection portion 
1 40 as a supplement or echo to the highlighting that oc- 
curs upon user selection of alarm indications (or por- 
tions thereof) during steps 355, 340, and 350 of Fig. 6). 

40 Basically, alarm indications being selected by the user 
are displayed in the input window selection portion 140 
(e.g., ■L*" 144a in Fig. 4), where wildcard indicators are 
added to character patterns to indicate which portions 
of an alarm indication are wildcards and which portions 

45 require an exact match. 

[0148] A selection input is received in step 615 in a 
selecting alarm indications routine. From the received 
selection, a set of queries 61 8, 624, 633, and642 occurs 
in order to display the selections properly to the user. 

50 [0149] A full character pattern query in step 618 is 
asked, wherein scanning of the received selection input 
of step 61 5 is performed. Alarm indications having been 
selected are searched to determine whether a full char- 
acter pattern 114 has been selected. If the answer is 

55 *yes', a full character pattern 1 1 4 is copied out of the se- 
lection in step 621 . 

[01 50] Copying full character patterns 1 1 4 in step-621 
includes copying all full character patterns 114 from the 
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selection portion. Step621 copies full character patterns 

114 from the selection text to a temporary storage loca- 
tion. 

[0151] If the answer to the full character patterns 114 
query in step 618 is 'no 1 , a beginning character patterns 

115 query in step 624 occurs. The beginning character 
patterns 1 1 5 query in step 624 also occurs after the copy 
patterns in step 621 is complete. A beginning character 
patterns 115 query in step 624 scans the user selection 
to look for any occurrences in which a beginning char- 
acter pattern 115 has been selected by the user. 
[0152] If the answer to the step 624 query is 'yes', a 
copy patterns step 627 is performed, wherein selected 
beginning character pattern 115 is copied from the se- 
lected alarm indications and put into a temporary stor- 
age location. A wildcard symbol is added in step 630 at 
the end of the beginning character pattern 115. In one 
embodiment, an asterisk is used to indicate a wildcard. 
In alternate embodiments of the present invention, other 
characters are used to indicate a wildcard. 

[0153] If the beginning character patterns 115 query 
in step 624 is answered 'No 1 , an ending character pat- 
tern 116 query in step 633 asked. Step 633 is also 
reached after step 630. If an ending character pattern 

116 is contained in the user selection, then the ending 
character pattern 116 is copied from the user selection 
in step 636. A wildcard symbol is added to the beginning 
of the selected ending partial character pattern 116 in 
step 639. Again, an asterisk is used in the preferred em- 
bodiment to indicate the wildcard. 

[01 54] After the add wildcard symbol in step 639, or if 
the answer to the ending character pattern in step 633 
is 'no', an intermediate character pattern query in step 
642 is performed. In step 642, a scan of the user selec- 
tion to determine whether it contains an intermediate 
character pattern 117 is performed. If the user selection 
contains an intermediate character pattern 117, the in- 
termediate character pattern 117 is copied from the user 
selection in step 645. After copying the intermediate 
character pattern 117 in step 645, a wildcard symbol is 
added as a prefix and as a suffix to the intermediate 
character pattern 117 in step 648. Again, the preferred 
embodiment uses an asterisk as the wildcard symbol. 
[0155] After the wildcard symbol in step 648 is com- 
plete or if the intermediate character pattern 117 query 
in step 642 is answered •No', the copied character pat- 
terns, some of which now containing wildcard symbols, 
are arranged in a sensibly group order, preferably alpha- 
betically in step 651 . After step 651 , the copied charac- 
ter patterns and/or selections are displayed in step 654 
in the input window selection portion 140 to allow the 
user to verify proper selection has been read by the vis- 
ual configuration application 40. 
[0156] After the user selection has been processed 
and displayed in step 654, a return to the calling routine 
in step 657 is performed, which concludes the selecting 
alann indications underlying process. 
[01 57] To further illustrate the foregoing processes of 



Figs. 6 -*6J,F ig. 7 is an example of an input window 110 
having an input window list 112. Shown is a selected 
ending partial ("V"), full ( B HX3L"), and beginning partial 
(V) character pattern 118. After an M- bunon 225 com- 

5 mand (processed according to Fig. 6B), the temporaiy 
window list 122 receives a certain subset of the input 
window list 1 1 2. The subset in this example is a selection 
of HX3L, plus any alarm indication with an ending capital 
V, plus any alarm indication beginning with a letter "L", 

10 since they are all part of the selection 118. Note that the 
resulting temporary window list 122 is alphabetically or- 
dered, without regard to the arrangement of the partial 
selection of included items. 

[0158] Also, input window selection portion 140 indi- 
15 cates criteria 144f corresponding to the selected char- 
acter patterns as "*V B , "HX3L", and V*. This display, in 
input window selection portion 140 is supported by the 
routine outlined in Fig. 6J. 

[0159] The output window list 132 represents an ag- 

20 gregation of subsets of the input window list 112. This 
is evidenced from comparing the displayed output win- 
dow list 132 with the temporary window list 122. Alarm 
indication entries *HPF' 1 34, "HSF" 136, and "HSR" 1 38 
are in the output window li§t 1 32, but not in the tempo- 

2$ rary window list 122. Therefore, the three alarm indica- 
tion entries *HPF" 134, "HSF" 136, and "HSR" 138 re- 
sulted from a prior subset selection process. 
[01 60] Clearing the output window list 1 32 is done by 
pressing the x button 242 (whose processing is outlined 

30 in Fig. 6H). Similarly, clearing the temporary window list 
1 22 is done pressing the V button 232 (whose process- , 
ing is outlined in Fig. 6C). Other operations on the tem- 
porary window list 1 22 are done by selecting portions of 
the temporary window list 122 the same way as select- 

35 ing portions of the input window list 112. For example, 
the V button 234 (whose processing is outlined in Fig. 
60) is used to delete the selected alarm indications in 
the temporary window 120, the w button 236 (whose 
processing is outlined in Fig. 6E) is used to keep only 

40 the selected alarm indications in the temporary window 
120, and the M-> button 238 (whose processing is out- 
lined in Fig. 6F) is used to move alann indications se- 
lected in the temporary window 120 to the output win- 
dow 130. 

45 [0161] Saving the output window list 132 is done by 
using the Save File button 244 (whose processing is out- 
lined in Fig. 61). All the alann indications listed in the 
output window alarm list 132 are saved to an output file 
30. In the preferred embodiment of the present invention 

50 apparatus, the SaveFile button 244 operation produces 
a GUI query window asking for a filename and directory 
to which the output window list 1 32 is to be saved. 
[0162] Fig. 2B is a block diagram showing the rela- 
tions between an alarm analysis tools application 50, 

55 visual configuration application output file 30, and aeon- 
figuration file 51 . Also shown is the alarm analysis tools 
application 50 general structure. 
[01 63] The visual configuration application output file 



27 



EP0 959 398 A1 



28 



30 has an alarm list 32, selected by a user of the visual 
configuration application 40 of Fig. 1 . As previously de- 
scribed, the visual configuration application 40 is a 
unique way of selecting alarms to be monitored. During 
startup, the alarm list 32 is transferred to the alarm anal- 5 
ysis tools application 50 via a startup link 57b. 
[0164] The configuration file 51 comprises several 
parts. First, there is a policies section 52, containing pol- 
icies, defined by a configuration engineer or an operator, 
for determining the processing and displaying of re- 
ceived alarm messages. There is a priorities section 53, 
containing the definitions of priorities given by a config- 
uration engineer or an operator, also used during anal- 
ysis and display during operation of the alarm analysis 
tools application 50. Also, the configuration file 51 in- 
cludes definitions of mask/filter selections by a configu- 
ration engineer or an operator. The mask/fitters section 
54 also contains dynamic mask/filters in a preferred em- 
bodiment of the present invention. Also contained in the 
configuration file 51 are miscellaneous tables 55, for in- 
stance, adaptation tables, whereby several ranges for 
alarms are defined and employed depending upon var- 
ious operating conditions. The configuration file 51 fur- 
ther includes an alarm listing 56. The alarm listing 56 is 
an alarm list used during configuration that supplements 
the alarm list 32 of the visual configuration application 
output file 30. 

[0165] The configuration file 51 is transferred to the 
alarm analysis tools application 50 during startup via 
start up link 57a. In another embodiment, the configura- 
tion file 51 contains display information, console specific 
information, alarm and/or machine status information, 
and other information that is used to analyze and display 
alarm messages transmitted to the alarm analysis tools 
application 50. 

[01 66] The alarm analysis tools application 50 is com- 
prised of an analysis portion 60 and a display portion 
70. Also, the alarm analysis tools application 50 proc- 
esses frames of alarm messages into defined groups 
according to the initialization policies 52, allowing for dy- 
namic policy considerations, which is used in the anal- 
ysis portions 60. The display portion 70 displays alarm 
information in an organized and meaningful manner to 
the operator. 

[0167] Fig. 2C is a general flow diagram of the alarm 
analysis tools application 50. The flow diagram is shown 
organized in three portions: a receive portion 103, an 
analysis portion 60, and a display portion 70. 
[0168] The alarm analysis tools application 50 re- 
ceives alarm message frames 75 (Fig. 1 ) in step 1 03. In 
response, an alarm message frame 75 is transferred in- 
to the analysis portion 60. 

[0169] The first step in the analysis portion 60 is to 
extract alarm messages 65 (Fig. 1 ) in Step 104. The ex- 
tracted alarm messages 65 are then mapped to alarm 
indications in Step 106. Typical alarm indications in- 
clude text, icons, sounds, or other information repre- 
senting an alarm to an operator. In the preferred embod- 



iment, the alarm indications include a one word summa- 
ry and a priority display (both discussed later in Fig. 13) 
The alarm indication information is then used to adjust 
categorizations and categories in Step 108. A categori- 
zation is (i) a user configured hierarchical set of catego- 
ries, with every application alarm in one of the catego- 
ries, where the categorization is made up of categories 
which represent the same kind of operational, process, 
or processing division; and (ii) any hierarchical category 
in any hierarchical category (or categorization), where 
the subcategories function to completely subdivide the 
containing categorization. A category is a user config- 
ured set of alarms, listed by their alann indications (i.e., 
names) and included alann types. A special type of cat- 
egory (which will become apparent later) is a pattern, 
whose member alarms are configured with some as- 
sumed order of expected occurrence and overall dura- 
tion, and are cataloged as: casual (predictive of some 
more serious alarm), acute (most important in their own 
right), or consequential (confirmatory of the overall oc- 
currence of the sequence as a whole and its casually). 
Adjustments include updating a metric associated with 
categories and categorizations to signify that an alarm 
indication has been received or is no longer active. 
[0170] The display portion 70 in the alarm analysis 
tools application 50 performs display operations. After 
receiving adjusted categorizations and categories, 
based on alarm indication information from Step 108, 
the display is updated according to the new information 
and presented to an operator in Step 109. Step 109 en- 
ables an operator to view alarm information in a plurality 
of formats. 

[0171] Fig. 8 is a structural embodiment 1120 of the 
present invention. Included in this structural embodi- 
ment are implementations of the analysis portions 60 
and display portions 70 (of Fig. 2B) used by the present 
invention to display alarm information to an operator. 
[0172] A category subsystem 1122 and/or a pattern 
subsystem 1 1 24 provide a set of main analysis portions 
60 in the structural embodiment 1120 shown. Within the 
subsystems 1122, 1124 is a means for mapping alarm 
messages 65 (Fig. 1) into alann indications and updat- 
ing a plurality of variables used to update category and 
categorizations metrics. 

[0173] Several paths link the category and pattern 
subsystems 1 1 22, 1 1 24 with the display routines (imple- 
menting display portion 70). Links 1125a and 1125b 
transfer categories and patterns, which are also catego- 
ries, directly to display generators 1 1 26 , 1 1 28, 1 1 30 (col- 
lectively 1166, Fig. 9). One display generator 1126 sup- 
ports displaying of fogs, lists, and alarm trends, while 
another display generator 1130 supports causal dis- 
plays. Display generator 1128 is further described be- 
low. Dynamic filtering links 1 1 27a, 1 1 27b mask and filter 
information between the category and pattern subsys- 
tems 1122, 1124 and the alarm display functions 1134. 
The alarm display functions 1134 are supported by dis- 
play graphics functions 1132 that provide low-level 
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graphical driver functionality specific, for the computer 
on which the present invention is being operated 
[0174] Inside the display generator 1128 is a hierar- 
chical diagram 1135, representing categories and dis- 
play capabilities of those categories. The top level cat- 
egory 1136 is an indicator category (referred to as an 
"indicator - category since it is a top level category rep- 
resented in a display window, as seen in Fig. 13). An 
operator traverses the category hierarchy 1135 to see 
sub-categories 1137a, 1137b, and further traverse the 
category hierarchy 1135 to even lower subcategories 
1138a, 1138b, 1138c, 1138d. Information from subcate- 
gories, such as 1138a, propagates through the hierar- 
chy 1135 up to the top level category 11 36, thereby giv- 
ing an operator an ability to view sub-category informa- 
tion. 

[0175] Fig. 9 is an intermediate flow diagram 1150 il- 
lustrating data flow and control of an embodiment of the 
present invention. Shown in detail are sets of steps for 
analysis 60 and display 70 of Fig. 2B. 
[0176] A starting point of the flow diagram 11 50 is an 
alarm directory (and state data) 1162. This is the first 
point receiving alarm indications. Information from 
alarm directory 1162 transfers to a set of display gener- 
ators 1166 via an update link 1165. Display generators 
1 166 transfer information in the form of current data via 
link 1164 back to the alarm directory 1162. 
[0177] The display generators 1166 transfers infor- 
mation, in the form of logs and trends in link 1167 to an 
alarm historian (etc.) 1168. The alarm historian 1168 
saves information to files on a medium having data re- 
trieval capability; the files are local, in one embodiment 
of the present invention, and remote in an alternate em- 
bodiment of the present invention. 
[0178] The alarm directory 1162 also transfers infor- 
mation to an analysis portion 60 of the embodiment of 
the present invention 1150. A transfer occurs in the form 
of new alarm state information in link 1161. The new 
alarm state information is received by a category data- 
base 11 52 having a category directory 11 60, which has 
a subset of category information about a set of catego- 
ries within the category data base 1152. 
[0179] Represented in the category database 1152 
are user categories 1154 and no name categories hier- 
archies 1139a, 1139b, collectively 1158. The user cate- 
gories 1154 has atop level indicator category 1136, in- 
termediate subcategories 1137a, 1137b, and 1137c; 
and low level categories 1138a, 1138b, and 1138c. The 
subcategories 1138a, 1138b, 1138c and others, are fur- 
ther represented in the form of no name categories 
1158. The no name categories hierarchies 1139a and 
1 1 39b are those categories that are separated from the 
user categories 1154 for preprocessing due to their rep- 
etition, thereby increasing efficiency so as not to recal- 
culate categories 1138a, 1138b, and 1139c multiple 
times, each time an alarm indication is updated. 
[0160] A category database 1152 further includes 
steps of priority, pattern, and dynamic filtering in flow 



1127C. The priority, pattern, and dynamic filtering infor- 
mation is learned at startup, but an operator has control 
to change any of these settings, under password pro- 
tection, in an embodiment of the present invention. 

s [0181] Operator control 1 1 70 enables an operator to 
view user categories in multiple ways and also perform 
mask changes via link 1172. Maskchan'ges are used to 
view user categories in different ways, and analyze cat- 
egories 1 1 54 according to (some) criteria. Also, the op- 

10 erator control in 1170 provides input to the priority, pat- 
tern, and dynamic filtering of step 1127C. The preferred 
embodiment GUI for operator viewing and carrying out 
such mask changes is illustrated in Figs. 1 2and 13, dis- 
cussed later. 

is [01 82] Fig. 1 0 shows a category hierarchy 1 1 54 with 
each category indicating the directly included alarms, as 
well as those inherited from lower level categories and 
those that are duplicated. Alarms are included in hierar- 
chically developed categories, where the same alarm 

20 may occur in several lower level categories. For the pur- 
poses of membership and membership counts, dupli- 
cated alarms in lower level categories are considered 
only once in any higher level categories. The basic strat- 
egy of membership counting and bookkeeping is from 

25 the bottom up, with alarms being firsteounted in an im- 
mediate lowest including category, and then into suc- 
cessively higher categories. An up count is a precom- 
piled/initialized number associated with a lowest level 
alarm reference that defines how many levels up that 

30 alarm is to be included into the alarm counts of higher 
level categories. This allows the counting process to 
proceed bottom up, stopping at that level where the 
alarm becomes redundant 

[0183] From the bottom up, category 1138a includes 
35 alarms G, J, and K. Category 11 38B includes alarms U 
M, and N. Category 1137a includes alarms D, E and F, 
but also includes its subcategory alarms 1138a, 1138b, 
giving alJ alarms in 1137a as ( O, E, F, G, J, K, L, M, N). 
Likewise, the top level category 1136 also includes 
40 alarms in subcategory 1137b, which further includes 
subcategories 11 38c and 1138d. Subcategory 1138c in- 
cludes alarms N, O, P. Subcategory 1138d includes 
alarms D, P, Q. Subcategory 1137b includes alarms G, 
H and I, but also alarms in subcategories 1138c and 
45 H38d, thereby giving a list (G, H, I, N, O, O, P, Q). Note 
that P appears only once in the alarm list of category 
1137b, 

[0184] Category 1136, tallying up its subcategories 
1137a and 1137b, includes alarms (A, B, C, D t E, F/G, 

so h. I. J, K. Li M, N, O. P, Q). wherein D, <3. N and P are 
shown only once, even though there are duplicate en- 
tries in the lower level subcategories. 
[0185] To restate the foregoing in geometric terms, 
3-dimensions and their intersections are used and form 

ss a "cube." Fig. 11 illustrates a categorization cube 1180, 
where each dimension corresponds to one independent 
categorization. The categorization cube 1180 has a 
process divisions categorization 1182 axis, a streams 
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categorization 1184 axis, and a situations categorization 
1186 axis. The categorization cube 1180 further in- 
cludes a main distillation category 1188, which is denot- 
ed by a set of heavy lines. Finally, a pair of mask/filter 
categories 1190 is represented by the shaded rectan- 
gular boxes within subcategory cubes. 
[01 86] Any of the categorization cubes' 1 1 80 subcate- 
gories, at any level, is a slice "perpendicular to" the cor- 
responding subcategory axis, or dimensions. Masking 
is achieved by selecting one or more slices for each 'di- 
mension* and intersecting them with selections of slices 
taken from each of the other dimensions. 
[0187] The categorization cube 1180 is a visual rep- 
resentation of the independent categorizations. It is im- 
portant to understand the role of the independent cate- 
gorizations 1182, 1184, 1186 as each containing all, or 
substantially all, of the alarms. Each independent cate- 
gorization 1 1 82, 1 1 84, 1 1 86 is like a separate coordinate 
in a coordinate system, whose individual values are the 
alarms grouped in the subcategories, which define the 
increments of that coordinate system. 
[01 88] Fig. 1 2 is an illustration of a hypothetical appli- 
cation mask/filter 1 1 72 and operator control 1 1 70 of Fig. 
9. The example display 1 200 is made up of independent 
categorizations 1230a addressing process divisions, 
streams, situations, and operations. Within the Process 
Divisions categorization 1230a, there are categories 
1220a, namely: Reactor 1235, Main Distillation 1237, 
and Lights Distillation 1239. Within the Streams catego- 
rization 1230a are: Steam, Lights, Heavies. Within the 
Situations categorization 1230a are categories and/or 
patterns 1 220a: Startup (a category), clean (a category), 
valve stick (a pattern), and normal run (a hierarchical 
category). Within the Operations categorization 1230a 
are three categories: Safety, Equipment Safety, and 
Quality. 

[01 89] The example display 1 200 includes a main dis- 
play area 1210a and a categorization display area 
1220a. An operator interfaces with the categorization 
display area 1220a and views in the main display area 
1 21 0a, information about the mask/filter categorizations 
and the selection criteria input. Useful information is 
shown as a ratio of filtered alarms versus the total 
number of alarms within a category. Illustrative of this 
point is the Lights category indicator alarm ratio indica- 
tion 1238, which indicates "6/10" (meaning six alarms 
have not been filtered, four have been filtered, and there 
have been a total of ten alarms received for the Lights 
category). 

[01 90] Fig. 1 3 is an example of the mask/filter of Fig. 
12 applied to a styrene plant. The graphical illustration/ 
representation of the styrene plant has independent cat- 
egorizations 1230b, each having respective indicator 
categories 1220b. For example, the "Streams" catego- 
rization 1230b has indicator categories 1220b "Cooling 
Water Line", "Fuel Line", Nitrogen Line", "Product Line", 
■Steam Line", "Vent Line", "# (others)". Likewise, the 
"Situations" categorization 1230b has its respective in- 



dicator categories 1220b and/or patterns "Bad Separa- 
tion", "Nitrogen Failure", "Clean", "Normal Run", .... and 
so on. Furthermore, the embodiment shown has a main 
display area 1210b. 

5 [0191] The main display area 1210b provides a 
graphical illustration 1212a of the subject polymer/ 
chemical process having process divisions categories: 
Furnace, Reactors, Feed Tankage, Heat Recovery, and 
Separator. Each illustrated category has an associated 

io one word summary display 1250a. 1250b, 1250c, 
1 250d, 1 250e, and an associated priority display 1 252a, 
1 252b, 1 252c, 1 252d, 1 252e. These one word summary 
and priority displays are derived from the alann indica- 
tions mapped to (step 106) and displayed (step 109) in 

1$ the analysis 60 and display 70 sections of Fig. 2B. 
[0192] During operation, each indicator category 
1 220b shown has a one word summary and priority cal- 
culated when the Process Divisions categorization 
shown (in 1230b) is selected for the main display area 

20 1 21 0b. Continual update occurs while this display is ac- 
tive and the system is operating. 
[0193] Additional areas, or so^alled "buttons" in the 
embodiment of the present invention display are the 
"Selected" button 1 225 and toggle control buttons 1 240, 

25 which are discussed later. 

[0194] The intent of having a schematic diagram 
1212a is to provide an operator with alarm context in- 
formation. Having an understanding of a process flow 
and having one word summary and priority summary 

30 displayed beside a category aids an operator in diag- 
nosing an abnormal situation. Additionally, like typical, 
graphical user interface Windows, the GUI window of 
the styrene plant has menu items: File, Edit, View, Win- 
dow, FoxTools™, Help. In particular, the FoxTools™ 

35 menu bar item provides (in a drop-down menu) a series 
of selectable items (selectable through computer mouse 
or keyboard selection methods) that are used to provide 
input to an alarm analysis routine 60 (Fig. 2B) and alarm 
display routine 70 (Fig. 26), ultimately affecting an op- 

40 erator's understanding of an abnormal situation, further 
menu item detail is discussed later. 
[01 95] To further automate selection and displaying of 
related alarm information, the present invention pro- 
vides dynamic filtering 1127c Fig. 9. To enable such fil- 

45 tering, so-called "patterns", or ordered sets of alarms, 
are employed. Fig. 14 illustrates a pattern 1262 which 
is a configured sequence of alarms mapped from a 
causal event progression model. A pattern module, in 
general, accommodates the use of causal models to in- 

so , fer unmeasured events or alarm conditions, predict sig- 
nificant alarms, dynamically filter the display of less im- 
portant alarms in alarm showers, and diagnose complex 
alarm patterns. Causal models are analog or logical, 
provided directly in the system, or imported from other 

55 applications, such as expert systems. 

[0196] The pattern structure of Fig. 14 divides its 
alarms and variables into causal alarms 1263a (used to 
anticipate more important alarms), acute (important) 
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alarms 1263b, and consequential alarms 1 263c (tailing 
consequences of the important alarms 1263b). The pat- 
tern 1262 is configured directly or generated indirectly 
from an associated model. The configuration data nor- 
mally includes just the content alarms, the order and s 
causal 1 263a/acute 1 263b/consequential 1 263c classi- 
fication data, and a time parameter 1265. However, cer- 
tain added functions require additional operator and en- 
gineer configuration. An additional prediction or diagno- 
sis uses a pattern matching process, where the pattern 10 
and alarm or trend history are computed into a normal- 
ized metric. 

[0197] The pattern information 1 260 represented fur- 
ther includes a modeled causal event tree progression 
1 26B, represented by the causal event tree flow diagram is 
1269. From the causal alarms 1263a, acute alarm(s) 
1 263b are predicted. From the acute alarms 1 263b, con- 
sequential alarm(s) 1263c are predicted. 
[0198] For example, causal alarm A, followed by 
causal alarm D predicts acute alarm E. Also, causal 20 
alarm B followed by casual alann D predicts acute alarm 
E. Finally, casual alarm C predicts acute alarm E. 
[0199] An acute alarm E prediction further predicts 
acute alarm G. An acute alarm F event predicts acute 
alarm G and consequential alarm 1 in pattern 1 262. Fol- & 
lowing the predicted G portion of the tree progression 
1268, acute alarm G precedes consequential alarm H, 
which precedes consequential alarm J. Consequential 
alarm I precedes consequential alarm K in this pattern 
1 262. Note that the longest relevant time configured as 30 
a parameter 1265 determines the time length within 
which a series of alarms is considered part of the mod- 
eled casual event tree progression 1 268. 
[0200] Fig. 15 has two prediction and diagnosis ex- 
amples showing a pattern metric based on a largest set 35 
of history alarms matching a given pattern order. Pre- 
diction and diagnosis require a comparison of pattern 
metrics corresponding to different related patterns, to 
pick those patterns that most closely match the actual 
history of alarms. Predictions use comparisons involv- 40 
ing only causal alarms or variables. Diagnosis use an 
entire set of causal, acute, and consequential alarms or 
variables. This process amounts to a fuzzy logic expert 
system in which the patterns 1262 constitute a set of 
rules. An advantage of pattern analysis is that it accom- *s 
modates any modeling errors or redundant models of 
this sort likely in this kind of modeling. This is an impor- 
tant characteristic in a system where the models come 
from many sources and include many modeling errors. 
[0201] Example 1 270a has a pattern 1 272a, which is so 
compared against a pattern history 1274a. It shows a 
prediction match 1 276a equaling 2/3 (67%) of the causal 
alarms. It also contains a diagnostic match 1 278a equal- 
ing 4/B (50%) for the entire pattern 1272a. The predic- 
tion match 1276a and the diagnostic match 1278a are 55 
determined from the history 1274a. 
[0202] Example 1270b has a pattern 1272b, which is 
compared against a pattern history 1274b. It shows a 



prediction match 1276b equaling 3/4 (75%). It also has 
a diagnostic match 1278b equaling 7/11464%). These 
matches 1 276b and 1 278b are determined from the his- 
tory pattern 1274b and calculated based on the present 
pattern 1272b. 

[0203] Fig. 16A gives several alterative diagnosis, by 
name and associated so-called 'fish bone" diagram, or- 
dered by their computed metric. Each predicted pattern 
1280a is listed in a main display area 1210c in a left 
column 1 280. A 5 computed metric match column 1 282 
indicates relative predictions among the several pat- 
terns 1280a. A fish bone diagram 1284 provides further 
indication about alarm timing to a trained operator. 
[0204] Fig. 1 6B illustrates a screen view for a certain 
pattern and includes a correction procedure. For exam* 
pie, in a main display area 1210d, a fish bone diagram 
1 288 for a sprinkler failure is represented. Below the fish 
bone diagram 1288, a recovery procedure 1286 for a 
sprinkler failure is shown in a series of steps. In this 
case, the steps are: (I) -Fetch Bucket, {2) Fill with Water, 
(3) Pour on Fire, (4) Repeat until Fire is out. Also shown 
are the categorizations and categories (within each cat- 
egorization), enabling an operator to further inverse an 
alarm information display hierarchy. 
[0205] The pattern has a second role. It distinguishes 
between alarms that are meaningful in themselves (the 
acute alarms) and alarms (the causal or consequential 
alarms) whose larger role is to allow an operator to pre- 
dict or anticipate the serious alarms, or confirm their pat- 
tern of causality. There is a user interest in suppressing 
expected consequential alarms or causal alarms, once 
their associated acute alarms have actually occurred. A 
flag in the pattern policy configuration data (52, Tig. 2B) 
specifies a desired form of dynamic filtering. 
[0206] The patterns also support configuration of al- 
ternative display functions to better summarize an actu- 
al situation while not deleting all reference to associated 
causal alarms. The pattern, in one embodiment, causes 
a display of only the acute alarms, distinguishing them 
in color (as suggested above) when a alarm represents 
a prediction from associated alarms. Dynamically filter- 
ing (1127c, Fig. 9) the causal alarms once the acute 
alarm is active/but displaying it with a symbolic repre- 
sentation to indicate associated active alarms (with a *+* 
or T100 et al."), is done in another embodiment of the 
present invention. In a further embodiment of the 
present invention, acute alarms are displayed with a tag 
or pattern name, depending on whether the causal 
alarms are also active. Additionally, when a pattern has 
supported a prediction or diagnosis, it is display in an 
appropriate color. 

[0207] Fig. 17a is an example of dynamic alarm ad- 
aptation enabled by the present invention. Specifically, 
the graph represents a swinging door ramp-in and esti- 
mated ramp-out adaptation. Alarm limit adaptation ex- 
tends to adapting a limit ramp-in and ramp-out rate. On 
the ramp-in side, the alarm adaptation is done by a var- 
iant of a swingingdoorcompression, where a worst case 
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slope increases through an initial alarm change time. On 
the ramp-out side, a less efficient process tracks a most 
recent 50% of a worst case excursion and time of return 
within old limit times, plus any worst case excursion out- 
side of a previously adapted ramp, and uses these to 
infer a new ramp rate. 

[0208] An alarm limit adaptation graph 1300 has a 
time axis 1 302 and an alarm limit axis 1 304. Three alarm 
limits are a normal alarm limit 1324, a 50% worst case 
excursion limit 1322, and a worst case excursion alarm 
limit 1320. 

[0209] The graph 1 300 further shows a process con- 
trol variable measurement line 1 305, with a limit change 
time 1 306. On the ramp-in side, there is a swinging door 
set of limits 1308 (upper limit), and 1310 (lower limit). 
On the ramp-out portion of the measurement line 1 305, 
there is a worst case excursion from slope limit 1316, 
and a normal slope limit 1318. A return to normal time 
point 1314 is an alarm limit time at which the measure- 
ment line 1305 is within the normal alarm limits 1324. 
[0210] Fig. 17b is an illustration of parabolic interpo- 
lation to estimate an alarm point crossing and peak ex- 
cursion. Alarm learning assumes an availability of worst 
case excursion values. The alarm analysis tools 50 (Fig. 
1) explicitly sample an associated measurement (peri- 
odically, but infrequently) for its worst case excursion. 
In the case of a pattern, the alarm analysis tools 50, in 
one embodiment, invoke a parabolic interpolation proc- 
ess to estimate a true worst case excursion, based on 
actual alarm entry and exit times, and the worst case 
excursion of an occasionally sampled set of process da- 
ta values. This interpolation also estimates the entry and 
exit times of a normal alarm limit excursion to determine 
when alarm limits are to be reset. 
[0211] The alarm excursion graph 1330 has a time ax- 
is 1 332 and an alarm value axis 1 334. A process control 
variable measurement line 1340 travels in a parabolic 
fashion An interpolation parabola 1342 estimates the 
path along which the measurement line 1 340 is estimat- 
ed to travel. The estimation parabola 1 342 has an inter- 
polated normal alarm entry and exit time length 1335. 
Represented as horizontal lines are two alarm limits: a 
Normal Alarm Limit 1 336 and a Pre-leamed Alarm Limit 
1338. The Normal Alarm Limit 1336 is in effect under 
normal operating conditions, but under pre-defined con- 
ditions loaded during start-up 57a (Fig. 2B) from the mis- 
cellaneous tables 55 (Fig. 2B), the Pre-leamed Alarm 
Limit 1 338 is automatically employed. 
[0212] In order to provide alarm state data at 1161, 
1162 in Fig. 9, the preferred embodiment utilizes alarm 
and category bit strings. Fig. 18 is a basic alarm and 
category bit string. In the methods of the alarm analysis 
toots 50, an active state of the alarms is represented by 
several long bit strings, one for each class of (high/lo) 
dev/etc) defined alarm. In the alarm bit string 1 350, each 
bit address 1362a, 1362b, 1362c, etc., corresponds to 
a particular process variable 1356. Each address 
1 362a, 1 362b, 1 362c, etc., is related to a particular proc- 



ess variable 1356, and its name, through an alarm di- 
rectory 1352. The alarm directory 1352 has an alarm 
index 1354 relating to the alarm variable name 1356, 
having a set of corresponding pointers 1 358, pointing to 

5 a location in the bit string 1 350. 

[0213] Whenever an alarm occurs, a, corresponding 
bit (i.e. 1360a, 1360b, 1360c, 1360d) in an appropriate 
alarm class string 1360 and bit address 1362a, 1362b, 
1362c, etc., Is set. Whenever an alarm conditions ceas- 

io es to be true, the corresponding bit is reset. A 'set' bit 
corresponds to a logical "1"; a reset bit corresponds to 
a logical "0". 

[0214] Fig. 1 9 shows an alarm bit string 1 360, and two 
category bit strings 1372, 1374. €ach category (or pat- 

is tern functioning in a simple category role) bit string 1 372, 
1374 is represented by a set of bit strings, whose bit 
addresses correspond exactly to the addresses of the 
alann bit string. In each category 1372, 1374, bit ad- 
dresses are set for those alarms considered to be in- 

20 eluded in the category 1372, 1374 and reset for those 
not considered part of the category 1372, 1374. 
[0215] A one word summary or other computation is 
carried out by masking the alarm bit string 1 360 and cat- 
egory bit strings 1372, 1374 together to compute the 

2$ strings of the various alarm and category bit set inter- 
. sections involved. After the intersection steps are per- 
formed, members of a resulting set are determined by 
. counting set bits in a resultant bit string, in practice, of 
course, the bit strings are broken into the memory bytes 

30 or words appropriate to their computers, and processed 
byte- or word-wise. 

[0216] Fig. 20 is an example of an alarm bit string 
1 360 and a category bit string 1 372 masking operation, 
where a result is shown in a result bit string 1382. A 

35 number of alarms count for each level within the alarm 
bit string 1360, the category bit string 1372, and result- 
ant bit string 1 382 is shown in a vertical column labeled, 
'number of alarms" 1384, on the right hand side of the 
bit strings 1380. 

40 [021 7] An example of the use of these strings to com- 
pute alarm tool information for a display is considered 
in computation of active alarms in a particular category. 
In the present example, the number of such active 
alarms is counted by intersecting the set of active alarms 

45 1 360 with the set of category alarms 1 372, bit- or byte- 
wise AND-ing the corresponding bit strings 1 360, 1372, 
and then counting the resulting number of set bits in the 
resultant bit string 1 382, placing the sum in the number 
of alarms column 1384. The set bits in the resultant bit 

so string 1 382 correspond to precisely those bits that are 
set in both the alarm bit string 1 360 and the category bit 
strings 1372. And, for the purposes of category alarm 
priority counts, the number of alarms in the resultant bit 
string 1382 is the number of active alarms in the cate- 

55 gory 1 372. In this case, the number of high alarms is 9; 
of lo alarms, 4; and of DEV alarms, 1 , for a total of 14 
alarms. 

[0218] The intersection computation is carried out by 
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taking advantage of the naturally paralleled bit opera- 
tions of a usual machine, so that the number of separate 
ANDs is between 1 /8th and 1/64th of the number of bits. 
Even so, with up to 200,000 alarms, the above compu- 
tations require 18,750 byte-wise (or 2,344,064 bitwise) 
AND operations. 

[0219] Specifically, alarm A101 in the alarm bit string 
1 360 has a bit pattern, 0110, in the high/lo/DEW... rows, 
respectively. Alarm A1 01 in the category bit string 1 372 
has a bit pattern, 0000, in the hi/lc/DEV/... rows, respec- 
tively. The AND-ing intersection produces an alarm 
A101 bit pattern, 0000, in the resultant bit string, as ex- 
pected. 

[0220] Alarm A105 has an alarm bit string 1360 of 
1010. Its corresponding category bit string 1372 has a 
bit pattern of 1000. The AND-ing operation yields a re- 
sultant bit string 1382 of 1000, because the Hi position 
bit in the alarm bit string 1360 and the Hi position bit in 
the category bit string 1360 each contain a logical "1", 
which results in a logical '1 " from an AND-ing operation. 
[0221] As a second example of the calculations, a one 
word summary is another category (from an indicator 
category subcategory, where an indicator category is a 
top level category in a main display area) that includes 
all of the active alarms that the indicator category in- 
cludes, but has the smallest intersection with the indi- 
cator category. In this case, the basic calculation calls 
for the same intersection as above, carried out first (as 
above) between the alarm bit string 1360 and the indi- 
cator category bit string 1372. The initial resultant bit 
string 1382 is then intersected with each candidate cat- 
egory (in principle, with all subcategories of the indicator 
category or of any of the independent categorizations 
not including the indicator category subcategory). This, 
in principle, calls for the same AND-ing operation for 
every category in the application (several hundred cat- 
egories, or more). However, once a category is shown 
to include all of the necessary active alarms, all of its 
super categories can be ignored because it will always 
be a better candidate one word summary category than 
any of its super categories. 

[0222] However, each such operation is stopped at 
any byte (or word) encountered where a new AND-ed 
result does not match an initial result because the can- 
didate category is then missing an alarm active con- 
tained in the indicator category. Further, once all alarms 
in the initial result have been covered in the AND-ing 
process, the process is also stopped because AND-ing 
is then complete to the extent that the structure of a par- 
ticular string is akeady known. The same shortcut can 
be used on any of the AND-ing operations. In the pre- 
ferred embodiment, the ordering of alarm variable ad- 
dresses in the bit strings is pre-compiled to maximize 
the likelihood of early completion of any AND opera- 
tions. 

[0223] Among those categories whose intersections 
successfully match the initial result, each (category, not 
its intersection) is then AND-ed with the original indica- 



tor category, and the resulting combined bit string set 
bits are counted. A matching category having a lowest 
count is the one word summary category. The individual 
intersections, counts, and comparisons are most effi- 

s ciently carried out separately for each category in order. 
[0224] Fig. 21 is an example of a mask/filter function. 
The computations shown in Fig. 19 and Fig! 20 assume 
no use of a mask/filter. Category priority computations 
are normally carried out without the use of a mask/filter. 

ro However, one word summary computations, in the pre- 
ferred embodiment, are applied after the alarms have 
been subjected to a mask/filter. This requires a separate 
pair of bit strings; one for the mask/filter 1392 as calcu- 
lated itself, and one for the filtered alarms 1394, which 

*5 are then used in computations restricted to them. An 
alarm bit string 1360 is provided and used in an AND- 
ing operation with the mask/filter 1 392 to calculate a fil- 
tered alarms bit string 1 394. 

[0225] The mask/fitter 1 392 itself is computed by con- 
20 sidering all category bit strings that have been effective- 
ly selected for the mask/filter. All those that are in each 
independent categorization are OR-ed together. The 
OR-ed results for each such categorization are then 
AND-ed together. The mask/filter 1392 results. This 
2S contains bits for all alarms that are included in at least 
one of the selected subcategories of every one of the 
independent categorizations. 

[0226] This operation, in one embodiment, is incre- 
mental in the sense that the net mask/filter string 1392 

30 is changed by combining with any new independent cat- 
egorization resulting when a selected category is dese- 
lected. The resulting categorization is more restricted 
and therefore applicable to narrow the bit selection of 
the mask/filter 1392 as a whole. The same cannot be 

3S said of a new selected category, which requires a com- 
putation from scratch (there are, however, other oppor- 
tunities for incremental mask/filter computation based 
on independent storage of intermediate independent 
categorization results.) 

to [0227] Fig. 22 shows an embodiment of a grouped 
string variant. The alarm analysis tools SO (Fig. 2B) em- 
phasizes computations based on categories that are as- 
sumed to be sparse in their alarms. Under those as- 
sumptions, bit strings have many fewer set bits than re- 

45 set ones. This effect is minimized by having one or more 
levels of higher level bit strings, where each set bit in a 
higher level bit string corresponds to a byte or word in 
a lower level bit string that includes at least one set bit. 
The intersection operations are carried out first on a 

so smaller higher level string, and then later, when needed, 
on the larger lower level bit string. 
[0228] In the embodiment 1 400 shown, a sparse rep- 
resentation is altered further: each group of related 
(high/lo/DEV) alarms is grouped together in digital 

55 words, with a single address integer indicating a relative 
address of a group in a corresponding full bit string 1 372. 
An entire data structure then consists of an initial count 
of the groups for the particular category 1402, followed 
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by the groups themselves. A special short code allows 
a coding of those categories (the global and independ- 
ent categorizations) which include all alarms. In addi- 
tion, a presumed principal, independent categorization 
(most naturally the one based on the main process di- 
visions) is used to weigh the bits so that each successive 
subcategory includes a corresponding group of succes- 
sive bits together. This optimizes the sparse bit repre- 
sentation, at least for these categories, to be as small 
as possible. 

[0229] The top bit string 1402 is a summary of a plu- 
rality of separate bytes 1403a, 1403b, 1403c, 1403d, 
1403e represented by this top bit string 1402. The sep- 
arate bytes 1403a, 1403b, 1403c, 1403d, 1403e of 
alarm bit strings 1 372 are linked to the top bit string 1 402 
by links 1404a, 1404b, 1404c, 1404d, 1404e. The left- 
most byte in the category bit string 1372 has bits set in 
the Hi alarm and the Lo alarm rows, with all bits reset in 
the DEV and the rows. A corresponding bit pattern 
in the left-most vertical column 1405a is shown and 
reads (from top to bottom) 1, 1, 0, 0. Link 1404b con- 
nects to string 1403b, which has bits set in the Hi and 
Lo bit rows, therefore the bit group 1 405b has a 1 , 1 , 0, 
0. The middle bit string group 1 403c in the bit string 1 372 
is linked to the vertical column 1405c via link 1404c. The 
bit string group 1403c, has bits set in the Hi and Lo bit 
positbns and has a corresponding vertical bit group 
1405c of 1, 1, 0, 0, accordingly. The second from the 
right byte bit string 1403d linked via 1404d has a Hi and 
Lo rows bits set within the byte, therefore, a 1, 1, 1, 0 
pattern is shown in the top bit string 1402. bit column 
1405d. The right-most byte 1403e has all zeros, there- 
fore the corresponding vertical column 1405e linked by 
link 1404e has 0, 0, 0, 0 to indicate that no bits are set 
within the corresponding byte 1403e. 
[0230] Figure 23 is a block diagram of an alarm anal- 
ysis tool system 1410 having multiple operator consoles 
1414a, 1414b, 1414c, 141 4d monitoring an alarm sys- 
tem. Shown is an alarm system process controller 4 
linked to an alarm system host computer 6. The multiple 
console system 1410 has an operator console A 1 4 1 4a, 
an operator console B 1414b, an operator console C 
1 41 4c, and an operator console D 1 41 4d. The operator 
consoles are linked to the alarm system host computer 
6 via data communications links 1412a, 1412b, 1412c, 
141 2d, respectively. 

[0231] Each operator console 1414a, 1414b, 1414c, 
141 4d has a specific operator console mask/filter spe- 
cific for the operator console. For example, operator 
console B 1414b has a specific mask/filter 1416b spe- 
cific for that console. In the embodiment shown, each 
operator console 1414a, 1414b, 1414c, 141 4d has a 
mask/filter specific for each console 1416a, 1416b, 
1416c, 1416d. In an alternate embodiment, a mask/filter 
is operator specific, thereby dividing tasks among sev- 
eral operators. This also requires an ability to merge on- 
line the dedicated mask/filters associated with more 
than one task, to allow an operator to take over the role 



of one of his colleagues in an emergency. 
[0232] The console-linked masks 1416a, 1416b, 
1416c, 14T6d (1416a..d) offer similar selection capabil- 
ity as the operator controlled masks, but are accessible 
5 for display or change only under password control. The 
base mask/filter (however merged) allow two different 
implementations: first, as an overlay that always dese- 
lects unselected categories whenever called, albwing 
an operator to make another mask/fitter selection; sec- 

10 ond as a permanent selection to a configured console, 
so that only the selected categories are visible and avail- 
able for selection in a mask/filter. 
[0233] Suppression of display and inhibition of alarm 
generation and messaging generally accomplish the 

is same thing. In one embodiment, an existing system de- 
fines inhibiting alarms at the source end in a way that 
implies that the only place to fully inhibit the propagation 
of a message is at the source. While one would tike to 
manage all dynamic alarm suppression as display sup- 

20 pression, the present invention recognizes the impor- 
tance of and to provide a user with an option of viewing 
category suppressbn in terms of display suppression or 
in terms of source inhibiting: In an embodiment of the 
present invention, this is the surest way of ensuring that 

25 an alann suppressed in one location does not show up 
elsewhere to confuse the operator. 
[0234] When the latter option is chosen the alarms are 
inhibited at their source. A special problem arises when 
more than one active category applies to a particular 

30 alarm, or when prior manual or automatb changes in 
inhibition apply. In this case, the category mask/niter 
system keeps track of any prior inhibit states or external 
inhibiting actions, so that when all categories suppres- 
sbn cease to apply, the inhibit state is restored to an 

35 appropriate state. Tracking external inhibitor actions is 
particularly difficult but important. 
[0235] Use of source inhibiting where display sup- 
pression is active affects pattern prediction adversely. 
In this case, it is like reconfiguration in that, if not prop- 

40 erly treated, it gives rise to a false metric computation. 
Such alarms are marked as inhibited and excluded from 
the prediction metric calculation. 
[0236] Continuing to refer to Fig. 23, a specific con- 
sole mask/filter 1416b is transmitted from operator con- 

45 sole B 1414b to operator console C 1414c via links 
1412b and 1412c. This transfer is shown as transfer 
1 41 8a. This is a case where each operator console has 
only its individual console mask/fitter. In an alternate em- 
bodiment, a simple message is transferred from opera- 

50 tor console B 1 41 4b to operator console C 1 41 4c to ac- 
tivate masktfilter 1416b in operator console C 1414c, 
rather than the entire operator console B mask/filter 
1416b during transfer 1418a. Either embodiment is for 
the purpose of having the responsibilities of a first op- 

55 erator transferred to a second operator. 

[0237] Still, according to another aspect of the present 
invention, a transfer of the operator console B 1414b 
specific mask/fitter 1416b is transferred via transfer 
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1418b to the alarm system host computer 6 (oracentral 
alarm analysis tools 50 processor unit), thereby inhibit- 
ing all alarms specified in the mask/filter 1416b from 
every operator console in the set 1414a, 1414b, 1414c, 
1414d. This global mask/filter inhibit is intended to pre- 
vent operator contusion, as previously discussed. 
[0238] While this invention has been particularly 
shown and described with references to preferred em- 
bodiments thereof , it will be understood by those skilled 
in the art that various changes in form and details may 
be made therein without departing from the spirit and 
scope of the invention as defined by the appended 
claims. 

[0239] For example, the alarm system host computer 
6 and alarm tool auxiliary computer 8 of Fig. 1 may be 
effectively replaced by a single computer. The single 
computer (e.g., a server) serves as both the host and 
the auxiliary computers providing the functionality of 
both, as described separately above in conjunction with 
Fig. 1. 

[0240] Also, various linked lists, tables, arrays, tree 
structures, and other working data structures are utilized 
in conjunction with the routines and processes of Figs. 
6 - 6J. The context of the data structures are the sub- 
window 102 links, selected entries, character patterns 
115, 116, 117, and like like processed in Figs. 6 - 6J. It 
is understood that depending on the type/kind of data 
structure used to support the discussed routines, vari- 
ous search, traverse and retrieve functions/procedures 
are employed as common in the art. 
[0241] Figs. 24-40 collectively is intended to be a 
demonstration of an embodiment of the present inven- 
tion, principally showing an interaction among various 
windows within a typical application. An example appli- 
cation is a hypothetical styrene plant, where a plurality 
of example alarms in a global categorization are linked 
to categories, and further to categorizations via a set of 
mask/filters and pattern definitions, as specified in the 
detailed description section. 

[0242] The embodiment shown is intended to operate 
on a computer having GUI (graphical user interface) 
technology, specifically Microsoft Windows™; however, 
the present invention is a method and apparatus of an 
alarm analysis tool, not limited to any particular compu- 
ter system, operating system or user interface. Further- 
more, any input/output device capable of interacting 
with information stored in and displayed on a computer 
provides a means for operating interaction with the 
present invention. Such input/output devices include: a 
computer mouse, keyboard, touch screen, trackball, 
speech interpretation means, touchpad, etc. 
[0243] Fig. 24 represents the preferred embodiment 
of a top level GU1 1500 of the present invention. Stand- 
ard GUI features shown are window control buttons 
1502a, 1502b, a window title bar 1502c, and a window 
tool bar menu 1504. In the GUI window 1500 shown, a 
plurality of control button icons 1230c, 1220c are dis- 
played, whereby an input/output device operated by a 



user is used to select a subwindow to be displayed. 
[0244] The Window control icons 1502a, 1502b are 
used to reduce an application Window to an icon (in a 
standard GUI manner), increase the window 1500 to a 
s default large size or a user specified size, and close the 
window or application. 

[0245] The GUI window 1 500 title bar 1 502c indicates 
the application, "FoxTools™". The title bar 1502c also 
shows a window name, in this case 'Access Map". A 
10 properly titled window is intended to provide information 
to an operator. 

[0246] A standard window tool bar menu 1504 pro- 
vides operation capability to an operator. The preferred 
embodiment has a list: file 1504a, edit 1504b, view 

is 1504c, window 1504d, FoxTools™ 1504e, help 1504f. 
Standard Windows™ tool bar menu items include file 
1 504a, edit 1 504b, view 1 504c, and window 1 504d. The 
file item 1504a is used to perform standard file opera- 
tions, selected from a set including new file, open file, 

20 close file, save file as..., import and export, print, exit 
The edit item 1504b includes standard editing opera- 
tions, such as undo, cut, copy, paste, clear, select all, 
delete. View item 1504c includes standard operating 
items, such as zoom, show hidden items, and applica- 

2S tion customizable viewing information. The window item 
1504d includes application window commands, includ- 
ing cascade windows, tile windows, and show a pres- 
ently opened window. The window item 1504d enables 
an operator to move opened windows included in the 

30 alarm analysis tool application to the application fore- 
ground. 

[0247] The FoxTools menu bar item 1 504c is a list of 
alarm analysis tool customized operations, which pro- 
vides specific application operations for a particular 

35 alarm system. For example, the access map 1500 
shown in the GUI window 1 500 is available from the Fox- 
Tools™ items 1504e pull down menu list (standard in 
the art) in the event a close window operation is selected 
from among the window buttons 1502b. Furthermore, 

40 other window graphics are selectable from the Fox- 
Tools™ item 1504e. 

[0248] The help item 1504f in the window tool bar 
1504 provides a list of information for an operator from 
which to learn features of the present invention. Infor- 
ms mation retrievable via the help item 1 504f are definitions 
incorporated in the alarm analysis tools application 50 
(Fig. 2B), information on how to traverse a window struc- 
ture within the alarm analysis tools application 50, op- 
erating presumptions and modes, etc. In one aspect of 
so the present invention, the help item 1504f is a pull down 
menu displaying a list dependent on the window pres- 
ently being displayed. 

[0249] In the categorization portion 1230c of the win- 
dow 1500 shown, there is a styrene plant (i.e., global 
55 categorization) button 1232, a process divisions cate- 
gorization button 1233a, a streams categorization but- 
ton 1232b, a situations categorization button 1 232c, and 
an operations categorization button 1232d. Also shown 
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in the embodiment in window 1 600 is a history log button 
1231a and a battle ribbon trends button 1231b. Selec- 
tion of any of the aforementioned buttons, 1 232, 1 233a.. 
d, 1231a, 1231b opens an associated subwindow, cor- 
responding to a title in the button selected. 
[0250] An alarm category section 1220c includes a 
plurality of categories. Each column of categories is de- 
fined to be included within a categorization listed in the 
categorization button 1232a, 1232b, 1232c, 1232d lo- 
cated directly above the category button column, and 
pointed to by a graphical arrow 1233a.. .d, respectively. 
In the embodiment shown, selecting a category button 
from the category button columns 1231a.. .d, results in 
an associated subwindow being displayed, having infor- 
mation specific to the category having a title listed in the 
selected button. 

[0251] Fig. 25 is an example of the mask/filter of Fig. 
12 applied to a styrene plant. The graphical illustration/ 
representation of the styrene plant has independent cat- 
egorizations 1230b, each having respective indicator 
categories 1220b. Further detail is found in the detailed 
description section Fig. 13 discussion. 
[0252] Fig. 26 is a process graphics window of a fur- 
nace category. Included in the window displayed are op- 
erator interface buttons, in the form of independent cat- 
egorization buttons 1233a...d and category buttons 
1231a...d. The display further includes a main display 
area 1210e having a process graphic 1212b for the fur- 
nace category. 

[0253] The furnace process graphic 1 21 2b in the main 
display area 1210e includes an alarm indication listing 
in the graphic; two alarm indications are FSHV 1510a 
and FSHV 1 510b, where each example alarm indication 
has an associated alarm information box 1 51 2a, 1 51 2b, 
respectively. Every alarm indication within the furnace 
category is displayed in the process graphic display 
121 Oe. The process graphic 1212b provides an operator 
with a "road map" of the process steps in a furnace being 
monitored. 

[0254] Fig. 27 is a window of a fire hazard pattern cat- 
egory. This window is displayed upon a user selecting 
this window from the FoxTools™ menu item 1504e, or 
selecting the fire hazard category button from within the 
situations 1232c category list 1234c in the access map 
graphic 1502c. 

[0255] The fire pattern hazard pattern window has 
category main display area 121 Of having an alarm indi- 
cation listing, a set of control buttons 1502a...c, and an 
alarm status listing 1520. 

[0256] The fire hazard main display area 12l0e lists 
alarm indications in an organized manner, preferably al- 
phabetical, giving an operator information as to what 
alarm is included in the fire hazard pattern. In the em- 
bodiment shown, an operator inputs a selection via an 
I/O device, such as a computer mouse or touch screen, 
and selects (i) a set button 1502a, to set an alarm as- 
sociated with a selected alarm indication, (ii) the clear 
button 1502b, to clear an alarm associated with a se- 



lected alarm indication, or (iii) the all button 1502c, to 
select all alarm indications in the main window 1210e. 
In once aspect of an embodiment of the present inven- 
tion, the control buttons 1502a, 1502b, 1502c are used 
5 in both simulation and operation. 

[0257] The status box 1 520 lists a set of alarm status 
conditions in which an alarm in an alarm system is with- 
in. For example, a low-low alarm (LL) 1 512a status con- 
dition is the condition in which an associated alarm is 

io extremely below a normal operating condition (i.e., be- 
low a predetermined threshold). A check-off box 1512b 
having a check mark therein indicates a selected alarm 
indication from within the main display area 1 21 Oe is de- 
termined to have a tow-tow alarm (LL) 1 51 2a condition. 

is [0258] An overall fire hazard status indication is 
shown in a status condition list 1504a Presently dis- 
played is a 'No alarms' and "No priority' condition sta- 
tus. The condition status list 1 504a is determined by the 
fire hazard category, as determined by a fire ha2ard cat- 

so egory metric (as discussed in the detailed description 
section), which is based on the alarms associated with 
the fire hazard pattern category. 
[0259] Fig. 23 is a history log display window. The his- 
tory log display window is opened by selecting the his- 

25 tory log button 1231a from within the access map win- 
dow 1502c (Fig. 24), or from within the FoxTools™ item 
1504e selection pull down menu. 
[0260] In a history log main display area 1 210e, alarm 
indications representing captured alarms are displayed 

30 according to a line number list 1530, a sample time list 
1532, a main descriptor list 1504a, an alarm status list . 
1536, and a full text alarm description list 1538. further, 
a set of control buttons are shown, where a sample ad- 
vancing button 1525 increases a sample time from 0 to 

35 the end of a plurality of sample times, a reset button 
1526 resets the sample time to 0, a GOTO number but- 
ton 1527 to allow skipping to an nth sample, and a re- 
fresh button 1528 that clears alarm settings without re- 
setting the sample time. 

40 [0261] In the history log main display area 1210e, 
shown are the first 33 samples captured list 1532. The 
sample advancing button 1525 is selected to increase 
the sample count 1532. The next sample to be shown 
is sample 34, as indicated by a number shown in the 

4$ sample advancing button icon 1 525. The log entries de- 
scriptions 1538 show that an alarm flood occurs up to 
sample time 30 (line 22 in line number list 1530) and 
starts to back off at sample time 33, as seen in the sam- 
ples captured list 1532. 

so [0262] An operator selects a categorization or cate- 
gory by 'single clicking" an independent categorization 
button 1232a, 1232b, 1 232c, and 1232dorcategory but- 
ton 1231 a... d through the use of an I/O device coupled 
to the GUI window, then selects the selected button 
ss 1542a. 

[0263] Fig. 29 is the same history log as*Fig. 23, but 
having an active mask/filter, wherein the furnace 1543a, 
fuel line 1543b, normal run 1543c, and safety categories 
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1543d are selected. The intersection of those selected 
categories results in a main display area 121 Oh having 
a display list including lines 16-18 1540. The alarm 
names shown in the list are FF1, FFIg.FFV 1541. Note 
that the select button 1542a of Fig. 23 becomes a de- 
select button 1542b. Also, the process divisions, 
streams, situations, and operations independent cate- 
gorization buttons 1233a...d, respectively, each toggle 
all of their subcategory selections on or off. This combi- 
nation makes it easier to approach the filters from a se- 
lection and deselection point of view. 
[0264] Fig. 30 is a battle ribbon trend display (letter 
coded instead of color coded) with the same mask/filter 
carried over from the log in Fig. 29. A main display area 
1210e has a time scale 1544, beneath which corre- 
sponding alarm indication status lener codes 1543b are 
displayed. In this case, alarms FF1, FF1g, and FFV 
1541 , which are not masked out, are displayed horizon- 
tally across the battle ribbon trend main display area 
1 21 Oe. Note, again, the deselected button 1 542b mode. 
[0265] Fig. 31 is the same battle ribbon trend as in 
Fig. 30, but with the mask/filter removed. The main dis- 
play area 1210i has a time scale 1544 beneath which 
an alarm indication list 1534b having a plurality of asso- 
ciated alarm status indication letters is listed. Note, too, 
the selected button 1544a mode. 
[0266] The battle ribbon trend information 1546a is 
the same as the history log of Fig. 28, but in a different 
format. The reason for the different format is to allow an 
operator to view alarm information in an alarm priority 
format (Fig. 31), rather than a time history format (Fig. 
28), thereby enabling a different method of analysis. All 
alarms in the log show up in the trend format, but in a 
much clearer form than in the time history format. The 
mask carries over from the log as well. Because the time 
scale 1544 defines the time of events, the alarm indica- 
tions 1 534b are ordered alphabetically by name, making 
them much more easily searchable. 
[0267] Fig. 32 is a summary (alann panel) display pro- 
viding one word and priority summaries information 
{(iconic) summary display). This display is available 
from the FoxTools™ 1 504e pull down menu. A one word 
summary 1251a..e allows a single alann to percolate to 
a top level of a hierarchical if there is only one alarm 
active. A priority 1253a...e is based on priority ordered 
categories and is a better strategy than assigning prior- 
ities to individual alarms based on a neutral set of num- 
bers, such as 1, 2, 3, 4, 5, which makes it tempting to 
prioritize everything at 1. A mask/filter affects the sum- 
maries in the text boxes 1 251a.. .e, 1253a.. .e for a sub- 
set of categories, depending on the mask/filter. 
[0268] Fig. 33 is a the styrene plant graphic shown in 
Fig. 25. The styrene plant window having a main display 
area 1210b has the same one word summary and pri- 
ority summary data and display selection data as in Fig. 
32, as expected. The various formats, again, provide 
various levels of meaningful information to an operator, 
particularly because an operator has freedom to choose 



a display based on an abnormal situation and a desired 
level of analysis. 

[0269] Fig. 34 highlights optional inlay displays (from 
theFoxTools™ menu item 1504e pull down menu), 

s which includes a most frequent alarms display (pareto) 
1550a, process summary display 1550b, and most re- 
cent alarms summary displays 1550c. The most fre- 
quent alarms display 1550a is intended to encourage 
an enforcement of corrective engineering and operation 
' 10 of persisted problems. 

[0270] Fig. 35 is a patterns summary display, opened 
from the FoxTools™ menu item 1504e pull down menu. 
In the embodiment shown, the pattern summary display 
1210k has alarm sample cycle-through capability, as do 

15 other displays. Note from the detailed description sec- 
tion that a pattern alarm analysis is not affected by a 
mask/filter. 

[0271] The main display area 1 210k has a pattern cat- 
egory column 1 560 and match ratio column 1 562. In the 

20 preferred embodiment, the pattern category column 
1560 shows the top five best-matched pattern catego- 
ries 1 560a.. b. For each, a corresponding metric is listed 
in the match ratio column 1 562, where each metric ratio 
corresponds to its horizontal counterpart in the pattern 

25 column 1560. The metric ratio 1562a.e presents (i) a 
number of alarms recognized as being in a proper pat- 
tern order, and (ii) a total number of pattern alarms. To- 
gether, the two values compute the metric ratio as the 
first number divided (normalized) by the second, and 

30 shown as a percentage. From this display 1210k, a set 
of individual pattern displays are accessible, corre- 
sponding to the pattern category indications listed in the 
pattern column 1560. 

[0272] Fig. 36 has a main display area 1 21 0L having 

3S a cause alarm list 1570, a result alarm list 1574, and an 
effect alarm list 1576. Further, the main alarm display 
1210L has a recovery procedure list 1578. 
[0273] Fig. 36 is a fire hazard alarm pattern list dis- 
play, called from the access map in Fig. 24. In this dis- 

40 play type, a pattern is set up to predict its result and ef- 
fect alarms. Prediction occurs if a causal alarms quantity 
meets a pre-specified prediction threshold. In the exam- 
ple shown, the fire hazard pattern, the prediction thresh- 
old is one less then the total number (5) of causal 

45 alarms. To see the prediction action, an operator steps 
through the samples up to sample 9. The fire hazard 
pattern main display area 1210m shows three causal 
alarms set out of a total of five, which can be seen in the 
causal alarm list 1 570 in Fig. 31 . In the fire hazard alarm 

50 list of Fig. 32, the alarmed variables are colored. 

[0274] Upon the next (tenth) sample, the remaining 
results and effect alarms are immediately shaded darker 
pink (expressing the prediction of alarms here; the alarm 
state is not given). In an alternate embodiment, alarmed 

55 variables are displayed in a different type face as non- 
alarmed variables to express the same meaning as the 
shading. In another embodiment, a sound accompanies 
a change in alarm state. The furnace nitrogen flowtFNF) 
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variable is a result variable whose higher importance 
measured alann state overrides the prediction and is 
displayed normally. At the tenth sample, the pattern dis- 
play shows all but one cause alarm as being active, 
causing a prediction in accordance with the pre-speci- 
fied prediction threshold. 

[0275] In following the teachings of the present inven- 
tion, the alarm predictbns show up on any of the graph- 
ics of lists that show alarm states. Alarms contained 
within a pattern category arriving in a correct sequential 
order, as defined by a pattern category predefined list, 
is shown with an asterisk to the left of the alarm indica- 
tion in the cause column 1570; and the result list 1574. 
The cause column 1570 has five alarm indications with 
asterisk meaning the alarms arrived in the predefined 
. sequential order. In the result list 1 574, three of the eight 
alarm indications have asterisk markings 1575, mean- 
ing their associated alarms arrived in a sequence pre- 
defined in a pattern category. Intermediate alarms, such 
as FFIg are allowable in the pattern category definition. 
[0276] Fig. 37 is a fire hazard alarm list display. The 
main display area 1210m shows a list of alarm indica- 
tions included in the fire hazard pattern category, with 
alarmed variables having a shaded background 1579a. 
Note that the time sample is at time sample 30. 
[0277] A special check box display 1520 is designed 
to display the detailed alarm state as input or as user 
selected (for WHAT IF exercises). The alarm state value 
displayed with an alarm indicatbn only indicates the 
most significant of the alarm states, not all of the states. 
For example, the alarm indication FFV(HHN) would not 
also show FFV(HH,Hi), because HH is a more signifi- 
cant alarm state. The six check boxes in the special 
check box display 1520 are associated with the HH, 
HiLL, Lo, HD, and Dev alarm states. 
[0278] A check in an associated check box 1521b 
means that the state is selected for WHAT IF Selections. 
(Any alarms selected by double clicking the alarm state 
1521a, for example, has that state set and is indicated 
by a check in the check box 1521b, for example. The 
check is albwed to be set or reset 1 by picking it (via a 
computer mouse selection 'double click"). The remain- 
ing display modes react when a main alarm display 
1210m is "single clicked". Single or double clicking se- 
lection methods are a physical description of what an 
operator does with a computer mouse button. 
[0279] Text modes and color modes are used to pro- 
vide additional information to an operator. For example, 
black lettering of an alarm type tag, as opposed to an 
inverse lettering of an alann type tag 1521a, indicates 
one of the WHAT IF selected types of the selected alarm 
variable. A full red background of the type tag indicates 
one of the active alarm types for the selected alarm var- 
iable. A darker red background of the type tag indicates 
one of the predicted alarm types for a selected alarm 
variable. An active display background overrides the 
predicted display. In the example shown, the special 
check box display 1520 is highlighted in accordance 
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with a selected alarm indication TFPp(LL) 1579b. 
[0280] A one word summary and prbrity summary list 
1 524b show a fire hazard one word summary and safety 
as a priority summary. These summary words are de- 

5 termined in accordance with the fire hazard pattern cat- 
egory definition, set up by a process engineer or oper- 
ator. Note that although a mask/filter has no affect on a 
pattern, such as the fire hazard pattern, a mask/filter 
does have an affect on a one word summary and prbrity 

10 summary in the pattern display. 

[0281] Fig. 38 is the same fire hazard pattern display 
as Fig. 32, but having the fire hazard pattern mask sup- 
pressed, whose effects are observable in the main dis- 
play area 121 On, as seen in that the shaded alarm indi- 

1$ cations 1 579c are fewer than those in Fig. 32, due to the 
mask suppression. Further seen is a one word summary 
and priority summary list 1524c now showing clean and 
safety respectively, rather than fire hazard and safety, 
as in 1524b (Fig. 32). The fire hazard category button 

20 1 236 has a dotted outline, indicating the mask suppres- 
sion. 

[0282] Toggle control of categories and categoriza- 
tions is facilitated through the use of a set of toggle con- 
trol buttons, 1590, 1592, respectively. A set of toggle 
25 control buttons 1 590a. .e in the top row of toggle control 
buttons 1590 toggle categories into and out of states in- 
herent in each button 1590a..e. A set of toggle control 
buttons 1 592a. .e in the bottom row of toggle control but- 
tons 1592 albws toggling categorizations into and out 
30 of various mask conditions. The bottom row of toggle 
control buttons 1592 affects the overall selected/dese- 
lected button 1542 affected categorizations. Also, the 
bottom row of toggle control buttons 1592 only affects 
masked states from a state value enabled in the con- 
as trols. 

[0283] Toggle buttons 1590a, 1592a are defined as 
"no display" buttons, which causes the affected catego- 
ry alarms to be suppressed, no matter what. Toggle but- 
tons 1590b, 1592b are defined as "deselected" buttons. 

40 Toggle buttons 1 590c and 1 592c are defined as "pattern 
deselect" buttons. Toggle buttons 1 590d, 1592d are de- 
fined as "select buttons. Toggle control buttons 1590e, 
1592e are defined as "full display" buttons, which caus- 
es a display of so-tagged category alarms, no matter 

45 what other categories and categorizations are sup- 
pressed. 

[0284] Toggle control albws an operator to select a 
range of suppression actions he or she wants and to 
minimize the toggling action tohis choice. The upper set 

so of toggle control buttons 1 590, affect a selection of indi- 
vidual category maskings. The lower set of toggle con- 
trol buttons 1592 affect the behavior of the overall se- 
lected/deselected button 1542, or of the process divi- 
sions/streams/situations/operations buttons. These 

55 overall buttons only change a mask state from a state 
value that is enabled in the controls. Thus, individual 
states are set differently from the overall controls. Fur- 
thermore, color indications in each toggle control button 
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1590a..e, 1592a..e corresponds to a background shad- 
ing in each category or categorization button. 
[0285] Fig. 39 is a WHAT IF display. Alarm indications 
RSR 1 586 and RX2SV 1 588, which are selected in low- 
low state (RX2SV 1588) also shows prediction in the 5 
special check box display 1520.. 
[0286] This ala rms-to-category display provides an 
operator with an ability to see categories into which a 
given set of alarms fall. In the main display area 1210p t 
a left list 1 580a lists all of the alarm indications; a middle 10 
list 1584a lists all of the categories. 
[0287] Any reddened alarm indication defines (with 
the check boxes) an alarm that is tested for category 
membership. After alarm indication selection, the re- 
fresh button 1 589 selection causes all alarm categories is 
containing all selected alarms to be fully yellowed and 
ail categories containing some of the alarms to be lightly 
yellowed. The set button 1522a selects all active alann 
states, and the clear button 1522b clears all selections. 
The all button 1522c selects ali alarm variables, addi- 20 
tionally setting them all to their checked states (so that 
large selection Ijsts can be made by deselecting individ- 
uals rather than the other way around). 
[0288] All alarm lists, for example, list 1580a, also in- 
clude a list of alarm type labeled check boxes 1520. 2s 
When an alarm indication is "single click" selected, the 
alarm type labels corresponding to its detailed alann 
state are reddened. The checks are used to control 
alarm type selection for the given alarm. 
[0289] The one word summary 1582a shows a reac- so 
tors category having two of fifteen a larms set, where thir- 
teen alarms have been filtered. The priority summary 
1583a shows a safety priority. 
[0290] Fig. 40 is the same WHAT IF display with the 
actual alarm states selected. The alarm indications list 35 
1580b has different alarm selections, and, as expected, 
the categories listing 1584b shows a different one word 
summary 1582b (normal run) and different priority one 
word summary 1583b (safety). Again, the main display 
area 121 Op allows for multiple colors and multiple font 40 
types to provide graphically meaningful information to 
an operator. 
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1. In a computer system, an apparatus for selecting 
alarms for an alarm monitoring system, comprising: 

an application window, displaying a main alarm so 
list having a set of alarm indications, and dis- 
playing a set of operation indications; 
a selector coupled to said application window, 
capable of defining a set of selected alarm in- 
dications from the main alarm list, and defining ss 
a selected operation indication from the set of 
operation indications; and 
an operation unit, receiving the set of selected 



alarm indications and the selected operation in- 
dication from said application window as de- 
fined by said selector, and, in response thereto, 
transmitting an alarm list subset having charac- 
teristics of the selected alarm indications. 

2. The apparatus according to Claim 1 wherein said 
application window comprises a first subwindow, a 
second subwindow, and a third subwindow, said se- 
lector coupled to each said subwindow. 

3. The apparatus according to Claim 2 and either : 

a) wherein said first subwindow displays the 
main alarm list, said second subwindow re- 
ceives a temporary subset of the main alarm 
list from said first subwindow as defined by said 
selector, and said third subwindow receives a 
final subset of the main alarm list from said sec- 
ond subwindow as defined by said selector, and 
optionally, wherein said subwindows are verti- 
cal columns in said application window, where- 
in said first subwindow is the leftmost column 
and said third subwindow is the rightmost col- 
umn; or 

b) further comprising an input file having the 
main alarm list, and, optionally, 

further comprising an output file into which the 
alarm list subset is stored, and, further option- 
ally, 

wherein said first subwindow displays the main 
alarm list of said input file, said second subwin- 
dpw receives a temporary alann list subset of 
the main alarm list from said first subwindow as 
defined by said selector, and said third subwin- 
dow receives a final alarm list subset of the 
main alarm list from said second subwindow as 
defined by said selector, wherein the final alarm 
list subset is written to said output file, and, yet 
further optionally, either; 

(i) wherein said main alarm list includes alarm 
<xxJe acronyms, and, optionally, 

wherein said main alarm list further includes 
alarm icons, or 

wherein in each of said first, second, and third 
subwindows, respective alarm lists are dis- 
played in a sensibly grouped order, in which 
case further optionally, 

wherein said sensibly grouped order includes 
alarm indications listed in alphabetical order; or 

(ii) wherein said first subwindow includes a se- 
lection portion that lists the selector defined set 
of selected alarm indications, and, optionally, 
wherein said selector is capable of defining por- 
tions of alarm indications in the main alarm list 
and the temporary alarm list subset, 
wherein said selector further highlights the de- 
fined portions of alarm indications in a graphical 
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user interface manner, or 
wherein the selection portion includes one or 
more selection combinations of selector de- 
fined portions of alarm indications and a wild- 
card indicator, wherein the selection combina- s 
tions represent the portions of selector defined 
alarm indications in combination with an spec- 
ified portion of alarm indications. 

4. The apparatus according to Claim 1 wherein said 10 
operation unit affects the set of alarm indications as- 
sociated with the set of selected alarm indications 
in accordance with the received defined operation 
indication, and, optionally, 

is 

wherein the operation unit performs boolean 
logic operations on the list of alarm indications 
associated with the set of selected alarm indi- 
cations with respect to the selected operation, 
and, further optionally, 20 
wherein the set of operation indications include 
move, load, delete, keep clear, and save alarm 
list operations, and, yet further optionally, 
wherein each said subwindow has a set of op- 
eration indications associated therewith, 2S 
wherein each operation indication has a graph- 
ical area in said application window, and yet fur- 
ther optionally, 
wherein: 

30 

the main alarm list has a set of alarm indi- 
cation names; and 

the selector defines a set of a full, a begin- 
ning, an intermediate, or an ending list of 
alarm indication name characters, and, yet 3S 
further optionally, 

wherein each said alarm list operation indica- 
tion performs its respective operation on the en- 
tire alarm list in said subwindow with which it is *o 
associated, said operations having boolean 
logic functionality for operating on said subwin- 
dowalarm list in reference to the selected alarm 
list text portions, and, yet further optionally, 
wherein said second subwindow and said third 4S 
subwindow aggregate alarm indications in re- 
sponse to multiple move operations on the 
alarm list from said first subwindow and said 
second subwindow, respectively. 

so 

5. An alarm monitor configuration selection method 
operating on a computer, the method comprising 
the steps of: 

displaying an alarm list of possible alarm indi- ss 
cations for selection in an application window, 
said list being a main alann list; 
receiving an input selection criteria: 



operating on the alann list in response to the 
input selection criteria; and 
producing an alarm list subset having charac- 
teristics of the input selection criteria resulting 
from said operating on the alarm list. 

6. The method in Claim 5 wherein the step of dis- 
playing the alarm list in the application window com- 
prises the step of configuring a first subwindow, a 
second subwindow, and a third subwindow inside 
the application window, wherein the first subwindow 
displays the main alarm list, the second subwindow 
displays a temporary subset of the main alarm list, 
and the third subwindow displays a final subset of 
the alarm list, and, optionally 

further comprising the steps of: 

loading the alarm list from an input file; and 
displaying the alarm list in said first subwin- 
dow, and, further optionally, 

further comprising the step of storing the final 
alarm list subset to an output file, 

6. An alarm monitor configuration selection method 
operating on a computer, the method comprising 
the steps of: 

providing an application window comprising a 
first subwindow, a second subwindow, and a. 
third subwindow; 

loading an alarm list containing alarm indica- 
tions from an input file, said alarm list being a 
main alarm list; 

displaying the main alarm list in said first sub- 
window; 

receiving a first input selection criteria referenc- 
ing the main alarm list in said first subwindow, 
operating on the main alarm list in response to 
the first input selection criteria, wherein a tem- 
porary subset of the main alarm list subset is 
transferred to and displayed in said second 
subwindow, 

receiving a second input selection criteria ref- 
erencing the temporary subset in said second 
subwindow; 

operating on the temporary subset in said sec- 
ond subwindow in response to the second input 
selection criteria, wherein a final subset of the 
main alarm list is transferred to and displayed 
in said third subwindow; and 
storing the final alarm list subset to a file. 

7. The method of Claim 6 and either : 

a) wherein displaying an alarm list in said first, 
second, and third subwindows includes the 
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step of arranging the alarm indications in a sen- 
sibly grouped order, and, optionally, wherein 
the step of arranging results in an alphabetical 
alarm list; 

b) further comprising the step of displaying first s 
input selection criteria in a selection portion of 
said first subwindow, and, optionally, 

further comprising the step of sweeping alarm 
indications with a selector to define said first 
and second input selection criteria, and further M> 
optionally, 

wherein the step of sweeping alarm list indica- 
tions portions includes highlighting a set of 
alarm list indication portions in a graphical user 
interface manner; and, optionally, is 
wherein the step highlighting defines a set of a 
full, a beginning, an intermediate, or an ending 
list of alarm indication characters; or 

c) wherein the step of operating on the main 
alarm list in said first subwindow, the temporary 20 
alarm list subset in said second subwindow, 
and the final alarm list subset in said third sub- 
window is conuolled by alarm list operations, 
each operation having a graphical area indica- 
tion, each subwindow having at least one as- 2$ 
sociated alarm list operation, and, optionally, 
wherein the step of operating on the alarm list 
includes boolean logic operation, and, further 
optionally, 

wherein the step of operating on the alarm list 30 
is selected from the group consisting of moving, , 
loading, deleting, keeping, clearing, and saving 
alarm list operations, and, yet further optionally, 
wherein multiple move operations result in said 
second subwindow and said third subwindow 35 
aggregating alarm indications. 

8. In a computer linked to an alarm system having 
electronic alarm messages, a method for providing 
alarm information, the method comprising the steps 40 

<* 

for each alarm in a plurality of alarms in a sub- 
ject alarm system, associating a respective 
alarm indication with each alarm, each alarm 
indication being a representation of an alarm 
message; 

providing a set of alarm categories having a hi- 
erarchy of subcategories, wherein each cate- 
gory includes logically related alarm indica- ' so 
tbns; 

for the set of alarm categories, providing a set 
of categorizations, wherein each categorization 
includes logically related alarm categories; 
receiving alarm messages from the subject ss 
alarm system; 

mapping each received alarm message to the 
alarm indication that represents the alarm mes- 



sage; 

updating the categories and categorizations by 
a metric, as a function of the received alarm 
messages and the alarm indications to which 
the received alarm messages are mapped; and 
displaying a subset of the related categoriza- 
tions and categories in an organized and mean- 
ingful manner, thereby providing alarm informa- 
tion to an operator. 

9. The method according to Claim 8 and either : 

a) wherein a subset of the alarm categories in- 
clude patterns of alarms, each pattern defining 
a sequence of alarm indications, and, optional- 
ly, wherein the alarm categories include corre- 
sponding policies, wherein the steps of updat- 
ing and displaying the categorizations and cat- 
egories are performed as a function of said pol- 
icies, and, further optionally, 
further comprising a step of prioritizing alarm 
categories and categorizations with respect to 
one another; and 

wherein the step of displaying the updated cat- 
egorizations reflects a priority metric of the pri- 
oritizing step, or 

wherein the step of updating the categories and 
categorizations by a metric includes the steps 

of: 

for each alarm indication, providing an 
alarm criteria; 

providing each alarm category and catego- 
rization with an alarm counter, and 
adjusting each alarm counter in response 
to a comparison between an associated 
alarm indication of a received alarm mes- 
sage with the alarm indication's respective 
alarm criteria, wherein a subcategory di- 
rectly including an alarm indication adjusts 
its alarm counter for each associated alarm 
message comparison, and a hierarchically 
superior alarm category adjusts its alarm 
counter on a per subcategory and per im- 
mediately subordinate alarm indication ba- 
sis; in which latter case, further optionally, 

f urthercomprising the step of determining a set 
of one word summaries comprising the steps 

of: 

determining a list of indicator categories, 
an indicator category being a hierarchically 
highest level alarm category in a display; 
scanning all subcategories of the deter- 
mined indicator categories; 
for each scanned subcategory of each de- 
termined indicator category, (i) determining 
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which subcategory alarm counter equals 
the count of the indicator category and 
whose overall counts has the smallest 
number of alarm indications, and (ii) using 
the determined subcategory, forming one s 
word summaries from a subcategory de- 
scriptor or alarm indication descriptor of the 
determined subcategory; and 
displaying together the determined indica- 
tor category and the respective formed one 10 
word summary, and, yet further optionally, 

further comprising the step of displaying a one 
word summary of a highest level priority for a 
subset of the indicator categories; and, yet fur- is 
ther optionally, 

wherein either; (i) the step of updating compris- 
es the steps of: 

providing an alarm message discriminator 20 
referencing a subset of alarm indications; 
• screening the received alarm messages 
according to the alarm message discrimi- 
nator, said screening resulting in a working 
set of alarm messages; and 2$ 
applying the working set of alarm messag- 
es to the steps of determining a one word 
summary and displaying a subset of the 
updated categorizations, and, yet further 
optionally, either: 30 

A) wherein the step of screening the received 
alarm message further includes automatically 
imposing selections of alarm categories to be 
displayed as a function of the policies; and, yet 35 
further optionally, 

wherein the step of automatically imposing se- 
lections includes employing a dynamic alarm 
limit table, thereby dynamically adjusting a set 
of ranges for a subset of alarms as a function 40 
of the policies; or 

(ii) wherein the step of displaying a subset of 
related categories in a meaningful manner in- 
cludes indicating, for each alann categorization 
and category in a subset of alarm categoriza- *5 
tions and categories, an alarm activity refer- 
ence unit indicates a total number of associated 
received alarm messages and a total number 

of filtered alarm messages; and, optionally 
wherein categorization, category, and alarm in- 'so 
dications are displayed having a visual effect 
including at least one of shading, color, font, 
and type style; or 

(iii) wherein the step of forming a set of one 
word summaries further includes extending the & 
one word summaries to include indications of 
additional alarm criteria; or 

B) wherein the step of screening according to 



an alarm message discriminator-comprises the 
step of, for a plurality of alarm display consoles, 
screening the alarm messages according to a 
console specific alarm message discriminator 
for each console, and, optionally 
wherein the step of screening according to a 
console specific alarm message discriminator 
includes alarm message discriminator sharing 
among consoles, thereby allowing an operator 
to transfer alarm monitoring duties, or 
wherein the step of screening according to a 
console specific alarm message discriminator 
includes transmitting a console specific alarm 
message discriminator to the alarm system to 
inhibit alarm messages, thereby sharing the 
console specific alarm message discriminator 
with the plurality of alarm display consoles; 

b) wherein the step of receiving alarm messag- 
es includes parsing a frame of alarm messages 
into individual alarm messages for mapping to 
alarm indications, and, optionally, 

wherein for each category having patterns of 
alarms, an included alarm indication is classi- 
fied from a group consisting of a causal, an 
acute, or a consequential alarm type, or 
wherejn the step of displaying in an organized 
manner includes alphabetizing the alarm indi- 
cations included in the alann categorizations 
and categories. 

c) wherein the step of displaying in an organ- 
ized and meaningful manner includes the steps 

of; 

receiving a selection input from an opera- 
tor, and 

displaying a subset of alarm information in 
response thereto; 

d) wherein the step of displaying and hence 
providing alarm information is selected from a 
group consisting of logs, battle ribbon alarm/ 
event trends, alarm summary indicator matri- 
ces, and prediction/diagnostic displays), and, 
optionally 

wherein the step of displaying further includes 
displaying specific alarm information in a set of 
side log displays; or 

e) further including the step of loading an exter- 
nal configuration file, thereby initializing a plu- 
rality of variables used to provide the alarm in- 
formation to an operator. 

10. In a computer linked to an alarm system having 
electronic alarm messages, an apparatus for pro- 
viding alann information, the apparatus comprising: 

an interface receiving a plurality of alarm mes- 
sages corresponding to a plurality of alarms 
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from a subject alarm system; 
a plurality of alarm indications coupled to said 
interface, each alarm indication representative 
of an alarm message for the alarm, different 
subsets of alarm indications forming different s 
alarm categories and different subsets of cate- 
gories forming different alarm categorizations; 
a processor routine, coupled to the interface 
and responsive to the received alann message, 
the processor routine mapping the alarm mes- io 
sages into alarm indications and updating the 
categories and categorizations by a metric as 
a function of the received alann messages; and 
a display supported by the processor routine, 
wherein a subset of the categorizations and is 
categories are displayed in an organized and 
meaningful manner, thereby providing alarm in- 
formation to an operator. 

11 . The apparatus according to Claim 1 0 wherein a 20 
subset of alarm categories include patterns of 
alanns, each pattern defining a sequence of alarm 
indications. 

12. The apparatus according to Claim 11 wherein 25 
the alarm categories include corresponding poli- 
cies, wherein the processor routine updates and 
displays the 20 categorizations and categories as a 
function of said policies. 

30 

13. The apparatus according to Claim 12 wherein 
the processor routine includes a priority generator, 
wherein alann categories and categorizations are 
prioritized with respect to one another, wherein the 
updated categorizations reflect a priority metric. 35 

14. The apparatus according to Claim 12 wherein 
each alarm categorization and category includes an 
accumulator, wherein an alarm category directly in- 
cluding an alarm indication adjusts its accumulator <o 
in response to the processor routine indicating an 
active alarm, and a hierarchically superior category 
adjusts its alarm accumulator on a per subcategory 
and per directly included alarm indication basis. 

4$ 

15. The apparatus according to Claim 14 wherein 
the display includes a plurality of one word summa- 
ry subdisplays, a subdispiay being co-located with 
alarm category and categorization indications, 
wherein a one word summary is displayed in the one so 
word summary subdisplays, the one word summary 
being a subcategory descriptor or an alarm indica- 
tion descriptor for which a subcategory alarm accu- 
mulator count equals a count associated with the 
co-located alarm category or categorization indica- ss 
tion, and whose overall count has a smallest 
number of alarm indications, and, optionally, 

wherein the display further includes a set of 



one word summary priority subdisplays co-located 
with the alarm categories, wherein a one word sum- 
mary of a highest level priority is displayed. 

16. The apparatus according to Claim 11 wherein 
the processor routine 15 comprises an alarm mes- 
sage discriminator, wherein a subset of alarm mes- 
sages are filtered from a subset of alann category 
metric calculations, thereby inhibiting alarm catego- 
ry and categorization accumulator updates as a re- 
sult of the filtered alarm messages and affecting the 
display of including alarm categories and categori- 
zations, and, optionally, 

wherein the processor routine further compris- 
es a dynamic alann message discriminator 
having relevant association with said alann 
message discriminator, wherein the processor 
routine dynamically filters alarm messages in 
response to the dynamic alarm message dis- 
criminator, the dynamic alarm message dis- 
criminator operating as a function of active 
alarms, and optionally 

wherein the dynamic alarm message discrimi- 
nator includes a dynamic alarm limit table, the 
comparison processor routine employing the 
dynamic alarm limit table and responsivery ad- 
justing a set of ranges for a subset of alarms, 
thereby dynamically adjusting alarm category 
and categorization accumulators. 

17. The apparatus according to Claim 10 wherein 
said interlace receives a plurality of alarm messag- 
es in an alarm, message frame, said interface pars- 
ing the alarm messages out of the alarm message 
frame, wherein the alarm messages are transferred 
to the processor routine for updating the alarm-cat- 
egories and categorizations. 

18. The apparatus according to claim 15 wherein 
the alarm categories including patterns of alarms 
classify alarm indications as being casual, acute, or 
consequential, said processor routine using the 
classified alarm indications to dynamically filter 
alarm messages and predict future alarm events, or 
wherein the processor routine calculates an extend- 
ed one word summary having multiple alarm cate- 
gorization, category, or alarm indications, the calcu- 
lated extended one word summaries being trans- 
ferred to the one word summary subdisplays for 
presentation to an operator. 

19. The apparatus according to Claim 11 wherein 
the processor routine includes an alphabetizercou- 
pled to alann category indications, the alphabetizer 
transmitting the alphabetized alarm indications to 
the processor routine to display the alarm indica- 
tions In an organized and meaningful manner to the 



59 



EP 0 959 398 A1 



60 



operator, or wherein the categorization, category, 
and alarm indications are displayed having a visual 
effect including at least one of shading, color, font, 
and type style. 

5 

20. The apparatus according to claim 16 wherein, 
for a subset of alarm categorization and category 
indications, an alarm activity reference unit indi- 
cates a total number of received alarm messages 
and a total number of filtered alann messages. . io 

21. The apparatus according to Claim 11 further in- 
cluding a computer input/output device coupled to 
the display, thereby allowing an operator to interact 
with the alarm information, or is 

wherein the display includes display formats 
selected from a group consisting of logs, battle 
ribbon alarm/event trends, alarm summary in- 
dicator matrices, and prediction/diagnostic dis- 20 
plays, in which case, optionally, 
wherein the display further includes side log 
displays, wherein specific alarm information is 
presented by the processor routine in an organ- 
ized and meaningful manner, 1b further com- & 
prising a set of operator consoles, wherein 
each console has a unique alarm message dis- 
criminator, and, optionally, 
wherein each operator console has a commu- 
nication interface allowing alann message dis- 30 
criminator sharing among the set of consoles, , 
and, further optionally, 

wherein a console interface communicates in a 
bidirectional manner to the subject alarm sys- 
tem, thereby allowing a console to transmit a 3S 
consoje specific alarm message discriminator 
to the alarm system to inhibit alarm messages 
specified to be filtered from being broadcast, 
thereby sharing the console specific alarm 
message discriminator with the plurality of op- *o 
erator consoles. 

22. The apparatus according to Claim 1 2 further in- 
cluding an external configuration file, wherein the 
external configuration file is loaded into the proces- 45 
sor routine, the external configuration file having a 
plurality of initialization values for initializing a plu- 
rality of alarm processor variables used by the proc- 
essor routine. 

so 

23. A computer program product stored on a com- 
puter usable medium and comprising computer 
readable program means for causing a computer to 
become configured or arranged as claimed in any 
preceding apparatus claim or to carry out the meth- ss 
od as claimed in any preceding method claim. 

24. A computer program product comprising a com- 



puter readable medium having thereon a computer 
readable code means which when loaded causes 
the computer on which it is loaded to be configured 
as claimed in any preceding apparatus claim or to 
carry out the method of any preceding method 
claim. 
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